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RELIABILITY,  AVAILABILITY  AND  MAINTAINABILITY  ANALYSIS 
Or  THE  AQUILA  REMOTELY  PILOTED  VEHICLE  SYSTEM 

1.  INTRODUCTION 

1.1  Purpose 


The  purpose  of  this  report  Is  to  present  the  RAM  analysis  and 
evaluation  of  the  AQUILA  RPV  system. 

1 .2  Background 

The  objective  of  the  AQUILA  Remotely  Piloted  Vehicle  System 
(XMQM^IOS)  program  was  to  develop  a system  capable  of  demonstrating  the 
feasibility  of  using  an  unmanned  aerial  vehicle  system  to  conduct  real- 
or  near  real-time  reconnaissance,  target  acquisition,  artillery  adjust- 
ment and  laser  designation  beyond  the  FEBA.  USACOC  TARS-75  and  FASTAR 
studies  concluded  that  the  use  of  manned  aircraft  to  conduct  such  missions 
would  involve  unacceptable  losses.  The  RPV  system  would  complement  the 
current  and  projected  intelligence  gathering  systems  (OV-1,  REMBASS, 

SOTAS,  GSR)  as  well  as  current  and  projected  combat  information  systems 
(GSR,  FIR;.FIN0ER,  FO,  faalS)  in  the  area  forward  of  the  FEBA. 

During  CY72,  the  Remotely  Piloted  Aerial  Observer  Designator 
System  (RPAODS)  Program  approach  was  developed,  largely  at  the  suggestion 
of  the  Director  of  Defense  Research  and  Engineering  and  the  Office  of 
the  Secretary  of  Defense,  to  provide  a pre-prototype  phase  with  the 
objective  of  obtaining  realistic  specifications  for  procurement  of 
RPAODS  prototypes.  The  RPAODS  program  yielded  parametric  data  in  such 
areas  as  detectability,  survivability,  target  search  and  acquisition, 
target  tracking  and  designation,  and  imagery  transmission  links. 

On  27  September  1974,  TRADOC  and  DARCOM  signed  a letter  of 
Agreement  (LOA)  (Reference  1)  to  jointly  develop  a Remotely  Piloted 
Vehicle  - System  Technology  Demonstrator  (RPV-STD)  which  would  further 
demonstrate  the  feasibility  of  using  an  RPV  to  assist  the  ground 
commander  in  performing  reconnaissance  and  target  acquisition  (R/TA), 
adjusting  artillery  fire,  and  laser  designation  beyond  the  FEBA.  The 
LOA  identified  the  unknowns  to  be  resolved  by  test  and  experimentation 
and  the  specific  critical  issues  to  be  addressed.  Lockheed  Missile  and 
Space  Corporation  (LMSC)  was  awarded  the  contract  for  the  AQUILA  RPV 
system  on  20  December  1974.  As  a system  technology  demonstrator,  the 
major  concern  was  concentrated  on  developing  launch  and  recovery 
techniques,  preprogrammed  flight,  and  a variety  of  sensor  package 
capabilities.  Since  the  system  was  not  planned  as  a fieldable  system 
( non-mi litari zed ) , human  factors  engineering,  RAM,  logistical  planning, 
technical  manual  preparation,  mobility,  etc.,  took  a "back  seat"  in 
terms  of  priorities  of  funds  and  contractor  efforts. 
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Following  fabrication  of  the  system  and  contractor  testing,  the 
system  was  released  to  the  Army  for  testing.  A Force  Development  Test 
and  Experimentation  (FOTiE)  was  conducted  by  the  U S Army  Field  Artillery 
Board  (USAFABO)  during  the  period  of  14  July  1977  to  20  October  1977. 

An  Engineering  Design  Test-Government  (EDT-G)  was  conducted  by  the  U S 
Army  Electronics  Proving  Ground  (USAEP6)  during  the  period  of  14  July 
1977  to  18  November  1977.  Both  tests  were  conducted  at  Fort  Huachuca 
and  were  a coordinated  effort  between  USAFABD  and  USAEP6,  incorporating 
assessment  of  both  tests'  objectives  at  the  same  site  and  many  times 
gathering  data  for  both  tests  during  the  same  flights.  Several  other 
tests  were  conducted  after  the  FDT&E  and  EDT-G  which  addressed  survivability 
and  an  anti-jam  data  link.  Results  from  all  of  these  tests  are  used  in 
the  AMSAA  independent  evaluation.  For  brevity,  subsequent  references 
to  the  USAFABO  and  USAEPG  will  be  FASO  and  EPG,  respectively. 

1.3  System  Description 

The  AQUILA  RPV  system  consisted  of  five  major  subsystems:  the 
RPV,  the  sensor  payloads,  the  ground  control  station  (6CS),  the  launcher, 
and  the  retrieval  unit.  6FE  and  other  ancillary  ground  support  equipment 
were  also  used  during  testing.  The  entire  system  was  sufficiently  hard- 
ened for  use  outsioe  of  laboratory  environments  to  demonstrate  the 
technical  and  operational  properties  of  immediate  interest,  but  insuffi- 
ciently militarized  or  ruggedized  for  full  operational  testing.  Figure 
1.1  shows  the  RPV  system  components  as  setup  at  the  t^st  site. 

The  RPV  was  an  all-wing  design,  single  engine  aircraft  with  a 
wingspan  of  3.6m  and  a fuselage  length  of  1.8m.  The  aircraft  contained 
the  flight  control  package,  power  supply,  receiver,  transmitter,  engine, 
and  ntressary  support  equipment.  The  airframe  was  designed  to  accept 
several  ?ensor  subsystem  configurations.  Figure  1.2  shws  the  RPV. 

There  were  five  types  of  sensors  used  during  the  tests.  These 
are  designated  as  Phase  I through  Phase  V. 

The  Phase  I sensor  was  a gimballed,  unstabilized,  black  and 
white  television  (TV)  camera  which  had  a remotely  controlled  zoom  lens, 
focus,  and  neutral -density  filter  wheel.  An  internal  iris  automatically 
responded  to  the  light  present. 

The  Phase  II  sensor  was  identical  1o  the  Phase  I sensor  except 
that  a 35mm  panoramic  film  camera  was  added. 

The  Phase  III  sensor  was  a gimballed,  stabilized,  black  and 
white  TV  camera  which  contained  a centroid-of-brightness  video  tracker 
in  addition  to  the  other  features  of  the  Phase  I sensor. 
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1.  Launcher  3.  RetrUval  Systaa 

3,  RPV  vlch  Sanatir  4.  Ground  Control  Station 

Figura  1.1  Rl'V  Syataa  Major  Coiapona>;ca 


The  Phase  IV/V  sensor  was  the  stabilized  TV  sensor  with  a 
laser  rangefinder  and  designator  Incorporated.  The  TV  camera  had  a 
fixed  focus.  The  laser  was  a neodymli'm-yttrulm-alumlnum-garnet  (Nd-YAG) 
type  operating  In  the  1064  nanometers  region  with  three  pulse  rates 
available:  1,  10  or  20  pulses  per  second.  This  was  a Class  IV  laser 
capable  of  causing  permanent  eye  damage  to  unprotected  personnel.  The 
two  designations  for  this 'sensor  are  used  to  distinguish  between  the 
two  major  functions:  laser  ranneflnder  (Phase  IV)  and  laser  designator 
(Phase  V).  1 

The  6CS  was  contained  In  an  S-280  type  shelter.  It  contained 
two  operator  consoles:  cne,  to  control  the  aircraft  systems  and  perform 
preflight  and  Inflight  status  monitoring  of  the  RPV,  and  a second  console 
to  control  the  sensors  on  b^rd  the  aircraft.  Additionally,  eaulpment 
was  provided  to  display  andirecord  the  imagery  from  the  sensor.  The  GCS 
contained  a communicatlor/tijacking  subsystem  which  consisted  of  a conmand 
and  control  uplink  from  the  GCS  to  the  RPV  to  provide  aircraft  and  sensor 
commands,  a telemetry  dowel  Ink  from  the  RPV  to  the  GCS  to  carry  RPV  status 
data,  and  a video  display  and  target  tracking  data  link  from  the  RPV 
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Figure  1.5  Lii'ncher.  The  pneumatic  launcher  is  indicated  by  (1) 
with  an  RPV  (2)  being  readied  for  launch. 


The  launcher  subsystem  (Figure  1.5)  was  a truck  mounted 
pneumatically  operated  catapult.  It  consisted  of  two  storage  cylinders 
and  a power  cylinder  of  aluminum  alloy  with  a pneumatic  piston,  which 
was  intended  to  provide  a RPV  launch  speed  of  about  81.5  Kph  with  a 
6g  acceleration. 

1 The  retrieval  subsystem  consisted  of  two  ve'*tical  and  one 

horizontal  nylon  nets  supported  by  two  flat-bed  trailers.  The  vertical 
I nets  were  attached  to  hydraulic  energy  absorbers  and  designed  to  absorb 

the  forward  momentum  of  the  aircraft  with  minimum  damage  to  protrusions 
on  the  aircraft.  The  RPV  was  guided  into  the  vertical  net  by  means  of 
i a ground  mounted  TV  came*'a.  After  the  RPV' had  been  captured  in  the 

\ vertical  net  it  fell  to  rest  on  the  horizontal  net.  Either  vertical 

1 net  could  be  erected  to  provide  a bidirectional  capability. 

The  ancillary  ground  support  equipment  included  two  30  kilowatt 
(Kw)  generators  t.o  power  the  6CS,  an  assembly/maintenance  tent,  various 
test  equipment  items  for  checking  the  mechanical  and  electrical  system 
status,  and  handling  equipment  for  the  RPV. 
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1.4  Scope 

The  AQUILA  RPV  system  did  not  have  the  achievement  of  specific 
RAfi  goals  as  one  of  its  objectives.  The  data  collected  during  government 
testing  were  used  to  estimate  standard  RAM  parameters  for  the  sy&tem  as 
exhibited  during  the  tests  and  to  provide  a data  base  for  future 
evaluations.  In  addition  to  these  estimates,  the  major  failures  and 
special  probleri  areas  are  highlighted.  Since  no  RAM  data  exists  on 
any  previous  RPV  system  similar  to  AQUILA,  primarily  because  there 
ware  none,  no  comparison  RAM  evaluations  can  be  made.  The  results  of 
th«  analysis  were  used  as  a starting  point  for  evaluating  the  reliability 
gr)wth  of  the  RPV  system  as  it  goes  through  the  development  cycle.  The 
reliability  growth  curves  present  a projected  growth  rate  needed  to  meet 
the  ROC  requirements.  By  highlighting  the  special  RAM  problems  encountered 
during  the  testing  in  this  analysis,  their  repetition  in  any  follow-on 
RPV  system  should  be  lessened. 

1.5  Data  Sources 


To  date,  the  Advanced  Development  Validation  Test  Phase  has  been 
conducted  on  the  AQUILA  RPV  system.  This  phase  consisted  of  contractor 
testing  (LMSC),  FOT&E,  EOT-6,  and  supporting  technology  tests  in  the 
areas  of  anti-jam  data  link  and  survivability  tests.  The  tests,  in 
addition  to  addressing  the  critical  issues  defined  in  the  LOA,  provided 
data  to  support  the  development  of  the  ROC  for  the  Engineering  Develop- 
ment RPV  program. 

The  EDT-G  was  conducted  at  Fort  Huachuca,  AZ  from  Ju^y  1977  to 
November  1977  by  EFG  personnel.  Test  objectives  included  the  technical 
performance  of  the  RPV  system,  navigation  ability,  target  detection/ 
recognition/identification/location  ability,  safety,  RAM,  and  human 
factors.  AMSAA  wrote  the  Test  Design  Plan  (TOP)  and  monitored  the 
tests.  The  EDT-G  test  results  are  presented  in  the  final  test  report 
prepared  by  EPG  (Reference  2). 

The  FDT4E  was  conducted  at  Fort  Huachuca,  AZ  from  July  1977  to 
October  1977  by  the  FABD,  Test  objectives  were  similar  to  those  of  the 
EDT-G  but  stressing  mission  oriented  objectives  rather  than  system 
limitations.  Data  was  also  gathered  to  address  the  development  of 
organizational  and  operational  concepts  for  the  follow-on  RPV  program. 
Data  on  personnel  selection  and  training  were  also  collected.  The 
FDT&E  test  results  are  documented  in  a final  test  report  prepared  by  the 
FABD  (Reference  3). 

Although  the  contractor  was  required  to  perform  the  management 
functions  necessary  to  analyze  the  reliability  and  maintainability 
characteristics  of  the  system,  the  contractor  did  not  maintain  a 
comprehensive  RAM  data  collection  progrc.rt.  Thus,  no  contractor  RAM 
data  are  available  for  use  In  this  analysis  and  evaluation.  Extensive 
RAM  data  were  collected  during  the  FDT&E  and  during  the  EDT-G.  These 
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data  Mer«  used  to  estimate  the  RAM  cSaracterl sties  of  the  AQUILA  RPV 
system  as  demonstrated  during  government  testing.  Equipment  Performance 
Reports  (EPR)  were  published  by  both  test  teams  and  provided  Information 
on  special  problems  which  were  not  contained  on  the  data  collection  forms. 
These  EPR's,  particularly  the  set  produced  by  the  FOT&C  test  team,  proved 
Invaluable  In  assessing  the  qualitative  RAM  aspects  (complexity  of  the 
action,  ease  of  fault  Isolation,  repair/ replacement)  of  the  RPV  system. 

1 .6  Engineering  Oevelopnient  (ED)  RAM  Requirements. 

Throughout  this  report,  the  results  of  AQUILA  testing  will  be 
compared  to  the  requirements  for  the  ED  system  set  forth  In  the  ROC.  This 
Is  done  to  show  where  the  system  now  stands  and  how  much  It  has  to 
Improve.  For  quick  reference,  these  requirements  are  listed  below.  All 
reliability  figures  are  based  on  the  mission  failure  definition. 

a.  The  GCS  shall  have  between  a .92  Minimum  Acceptable  Value 
(MAV)  and  .97  Best  Operational  Capability  IBOC)  probability  of  completing 
10  hours  of  operation  without  a failure.  (MAV  MTBF  value  Is  120  hours.) 

b.  The  launch  unit  shall  have  between  .99  (MAV)  and  .995  (BOC) 
probability  of  completing  a launch  without  a failure  of  the  launch 

unit  or  the  RPV. 

c.  The  RPV  system,  less  sensor,  will  have  between  .91  (MAV) 
and  .94  (BOC)  probability  of  completing  a 3 hour  flight  (launch  through 
recovery)  without  a failure.  (MAV  MTBF  value  Is  31.8  hours.) 

d.  Given  a successful  launch,  the  RPV  system  will  have  a .82 
(MAV)  and  .89  (BOC)  probability  of  completing  a 3 hour  sortie  without 
Imagery  failure.  (MAV  MTBF  Is  15  hours.) 

e.  The  mean  time  to  repair  (MTTR)  and  maximum  time  to  repair 
(MAXTTR)  of  each  subsystem  shall  be  no  greater  than  the  times  Indicated 
for  the  listed  maintenance  categories: 


MTTR  MAXHR 

Organizational  .5  hr  1 hr 

Field  Maintenance  (OS/AVIM)  2 hr  4 hr 


Scheduled  maintenance  performed  during  non>operat1ng  hours 
shall  require  not  more  than  an  average  of  1 hour  per  day. 
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2.  RAM  ANALYSIS 


2 . 1 RAM  Characteristics  of  the  Ground  Control  Station  (GCS) 

2.1.1  GCS  002  RAM  Data  Analysis. 

The  FDT&E  test  personnel  operated  GCS  number  002  and  were 
responsible  for  recording  the  proper  RAM  data  on  it.  The  EPG  test 
team  occasionally  shared  in  the  operation  of  GCS  002  by  "piigybacking" 
a FDT&E  test  flight.  By  "piggybacking,"  we  mean  that  the  E/G  test 
team  wo'  Id  take  over  the  flight  operations  after  the  FDT&E  ti  m had 
completed  their  flight  objectives.  This  reduced  the  number  or  launches 
and  recoveries  needed  to  accomplish  test  objectives.  The  EPG  test 
team  also  used  GCS  002  in  many  of  their  other  test  flights.  This  was 
due  to  the  fact  that  their  GCS  (f'OCI)  was  not  yet  operational.  All 
operating  times  for-  GCS  002,  whether  by  the  FDT&E  or  the  EPG  test  team, 
were  recorded  by  the  FDT&E  data  collectors.  Assuming  a starting  time 
of  zero  hours  when  GCS  002  began  government  testing,  there  were  283.5 
hours  of  operating  time  accumulated  on  GCS  002  during  the  FDT&E/EDT 
test.  Table  2.1  lists  the  failures  attributed  to  GCS  002,  along  with 
their  approximate  time  of  occurrence  and  the  scoring  of  the  failure. 
Included  in  this  table  is  one  failure  which  was  not  scored  as  a failure 
to  GCS  002  by  the  scoring  conference.  This  failure  was  the  failure  of 
the  ground  camera  iris  control  (item  18).  Whereas  the  scoring  conference 
scored  it  as  a failure  and  charged  it  to  auxiliary  support  equipment, 
AMSAA  charged  it  to  GCS  002.  This  decision  was  made  based  on  the  fact 
that  the  camera  is  powered  and  controlled  from  the  GCS.  Several  other 
failures  charged  to  the  GCS  by  the  scoring  conference  could  fit  into 
this  category,  such  as  items  8 and  15  in  Table  2.1.  Item  15  was  a 
failure  of  one  of  the  remote  Intercom  stations  located  outside  the  GCS 
but  powered  from  the  GCS  and  considered  necessary  for  operation  of  the 
mission.  Item  8 was  a failure  of  the  GCS  tracking  antenna  to  maintain 
the  proper  heading  prior  to  launch.  Although  presently  located  on  top 
of  the  GCS,  the  Engineering  Development  (ED)  RPV  system  will  probably 
have  a remotely  located  antenna.  In  the  ED  system,  any  failure  of  the 
remote  antenna  will  be  charged  to  the  GCS  subsystem.  Similarly  then, 
the  failure  of  the  ground  camera  is  charged  to  the  GCS  subsystem  since 
it  is  essential  for  the  proper  control  of  the  RPV  during  the  recovery 
process.  Including  this  failure  in  the  total  number  of  failures, 
there  were  a total  of  22  equipment  failures  and  7.66  mission  failures 
on  GCS  002  during  the  test.  This  results  in  an  mean-time-between- 
failure  (MTBF)  point  estimate  (equipment)  of  13.11  hours  and  an  MTBF 
point  estimate  (mission)  of  37.66  hours. 

Assuming  the  exponential  failure  distribution  and  using  the 
average  GCS  on-time  of  3.2  hours  for  each  mission  (Including  both 
actual  flights  and  attempted  flights),  the  equipment  and  mission  reli- 
abilities for  GCS  002  were  estimated.  They  are  .78  and  .92,  respectively. 
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TABLE  2.1  FAILURES  ON  GCS  002  DURING  THE  FDTRE/EDT  KE  Equipment 
Performance  Reports  (EPR)  are  FDTiE  failures,  and  KH  EPR‘s 
are  EOT  failures.  Item  9 resulted  In  the  crash  of  RPV  022. 
Item  18  was  charged  to  auxiliary  equipment  by  the  scoring 
conference  but  Is  Included  here  (see  narrative). 


TIME  OF 


FAILURE  SCORE 

OCCURRENCE 

EPR  1 

Equipment 

Mission 

1 (HOURS) 

DESCRIPTION  OF  FAILURE 

1 

KE-13 

1 

0 

27.5 

Video  tape  recorders  not 
recording  video 

2 

KE-23 

1 

0 

54.2 

Video  tape  recorder  defective 

3 

KN-8 

1 

0 

70.0 

Erratic  data  link;  tracking 
on  side  lobe 

4 

KE-43 

1 

jO 

80.2 

Alphanumeric  display  incorrect 

5 

KH-10 

1 

.33 

91.5 

Camera  frame  counter 

6 

KH-n 

1 

0 

98 

Camera  frame  counter 

7 

KE-54 

1 

0 

108.8 

Digital  tape  recordm  circuit 
breaker  tripped 

8 

KE-58 

1 

.33 

116.2 

Tracking  antenna  slewed  off 
correct  heading 

9 

KE-64 

1 

1 

119.5 

Sync  lock-up  slip  In  data 
link;  CRASH 

10 

KE-66 

1 

0 

122.8 

Safety  Intercom  plug 

11 

KE-79 

1 

0 

128.0 

In-flight  diagnostic  panel 
defective 

12 

KE-74 

0 

1 

130.2 

Software  caused  RPV  to  fly 
erratically 

13 

KE-78 

1 

0 

139.1 

Topaz  frequency  converter 
overloading 

14 

KE>83 

1 

0 

144.9 

Focus  toggle  switch  on  sensor 

Cf  ntrol  panel 

15 

KE>88 

1 

0 

163.3 

Remote  Intercom  unit  Inoperable 

16 

KE<90 

1 

0 

170.5 

Alphanumeric  display  temporarily 
defective 

17 

KE-100 

1 

1 

184.9 

Telemetry  receiver  panel 

18 

KE-114 

1 

0 

191,5 

Ground  camera  Iris  control 

19 

KE-109 

1 

0 

202.3 

Teletypewriter  garbling 
output  data 

Microphone  headset  connector 

20 

KH-33 

1 

0 

205.2 

21 

KE-120 

> 

1 

219.0 

Power  control  relay 

22 

KE-127 

0 

1 

234.7 

Encoders  15,  16  and  17  out 
of  limits 

23 

KE-126 

1 

0 

239.1 

Teletypewriter  ceased  to  operate 

24 

KE-123 

0 

1 

239.1 

Burst  offset  calculations 
Incorrect 

25 

KH-50 

1 

1 

288.5 

Flashing  ground  and  lock 
lights 

TOTALS 

22 

7.66 

288.5  operating  hours 

, / 
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For  the  AQUILA  RPV  system,  maintenance  Is  divided  Into  two 
basic  categories:  crew/organizatlonal  and  contractor  field  maintenance. 
These  two  maintenance  categories  are  essentially  analogous  to  the  Aviation 
Unit  Maintenance  (AVUM)  and  Aviation  Intermediate  Maintenance  (AVIM) 
maintenance  categories,  respectively,  of  the  three  level  maintenance 
system.  There  were  occasions  when  a component  of  one  of  the  subsystems 
would  have  to  be  sent  back  to  the  contractor  facilities  for  overhaul 
and/or  repair.  This  could  be  considered  the  depot  level  maintenance 
category.  However,  no  data  exists  for  this  category  beyond  the  fact 
that  It  was  necessary  to  return  a particular  part  to  the  manufacturer 
for  repair.  For  that  reason,  this  evaluation  will  emphasize  the  crew/ 
organizational  and  the  contractor  field  levels  of  maintenance. 

All  maintenance  on  6CS  002  was  performed  by  the  FDT&t  team, 
with  the  exception  of  contractor  supplied  maintenance  and  three  actions 
by  the  EP6  crew.  All  scheduled  crew/organizatlonal  maintenance,  exclud- 
ing site  set-up,  was  performed  under  the  category  of  premission 
preventative  maintenance  (PM).  The  maintenance  parameter  estimates 
resulting  from  all  the  maintenance  data  on  GCS  002  are  presented  In 
Table  2.2.  These  estimates  Include  the  mean-time-between-maintenance 
(MTBM,  maintenance  ratio  (HR),  mean  maintenance  time  (H),  Inherent 
availability  (A^)  and  achieved  availability  (A^).  In  columns  2b  and 

2c  are  two  different  sets  of  values  for  the  unscheduled  contractor 
maintenance  parameters.  Included  In  2c,  but  not  Included  In  2b,  Is  an 
unscheduled  major  GCS  technical  Inspection,  overhaul  and  software 
change  required  after  the  crash  of  RPV  022  on  19  August  1977.  This 
action  was  not  typical  of  any  of  the  remaining  unscheduled  maintenance 
performed  by  the  contractor.  Thus,  both  these  numbers  as  well  as 
separate  availability  estimates  are  presented.  Column  3c,  which 
Includes  this  major  action.  Is  more  representative  of  the  actual 
availabilities  experienced  during  the  testing  than  Is  column  3b.  Site 
set-up  Is  not  included  under  column  la. 

The  GCS  emplacement  time  was  7.5  hours.  This  Included  2.3 
hours  for  leveling  of  the  GCS/truck  with  sand  bags.  A one  hour  require- 
ment Is  specified  In  the  ROC  for  system  emplacement  time. 

2.1.2  GCS  001  RAM  Data  Analysis. 

The  EOT  test  personnel  operated  GCS  001  and  wei'e  responsible 
for  collecting  the  appropriate  RAM  data  on  It.  GCS  001  had  been  used 
In  previous  contractor  testing,  but  an  operating  time  of  zero  hours  on 
GCS  001  when  turned  over  to  the  EPG  test  team,  must  be  assumed  since 
the  contractor  did  not  record  operating  time.  With  this  assumption,  a 
total  of  63.0  hours  of  operating  time  was  accumulated  on  GCS  by  the 
EPG  test  team.  Table  2.3  lists  the  failures  attributed  to  001,  along 
with  their  approximate  time  of  occurrence  and  the  -coring  of  the  failure. 
Included  In  this  table  Is  one  failure  (Item  1)  which  was  not  scored  by 
the  scoring  conference  but  was  Included  In  the  EOT  test  report.  It  Is 
felt  that  this  Is  a valid  failure  that  was  overlooked  by  the  scoring 
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conference.  This  failure  Is  also  Included  In  this  analysis.  With  a total 
of  63  operating  hours,  7 equipment  failures,  and  2 mission  failures  ' 
recorded  on  GCS  001,  the  equipment  and  mission  mean>t1me-between>f allure 
point  estimates  are  9.0  and  31. S hours,  respecti'  ily.  Assuning  an 
exponential  failure  distribution  and  using  the  average  GCS  on>t1me  of 
7 2 hours  for  each  mission  (Including  both  scrubbed  and  actual  flights), 
point  estimates  are  .70  for  the  equipment  reliability  and  .90  for  the 
'..isslon  reliability.  The  average  GCS  on-time  as  determined  from  the 
.'DT&E  data  was  used  because  EOT  data  listing  the  operating  hours  for  each 
Instance  that  GCS  001  was  powered  for  a mission,  were  not  available. 

The  EPG  RAM  data  collectors  did  not  record  maintenance  data  on 
contractor  maintenance  actions;  therefore,  only  organizatlonal/crew 
level  maintenance  data  are  used  In  the  analysis.  A suninary  of  the 
maintenance  parameters  resulting  from  this  maintenance  data  on  GCS  001 
Is'  presented  In  Table  2.4. 


TABLE  2.3  FAILURES  RECORDED  0>!  GCS  001  DURING  THE  EDT 

Time  of 


Failure  Score 

Occurrence 

EPR  1 

Caul omen t 

Mission 

(Hours ) 

Description  of  Failure 

1 

KH-49 

1 

0 

10.0 

Waypoint  guidance  panel 

2 

KH-54 

1 

1 

16.5 

Integrated  circuit  on  electronics 
Interface  unit 

3 

KH-56 

1 

0 

16.8 

Video  recorder  Inoperative 

4 

KH-68 

1 

0 

40.7 

Line  fuse  In  pllot'sj  monitor 

5 

KH-69 

1 

0 

43.8 

LED  on  waypoint  command  status 
panel 

Ground  lock  light  burned  out 

6 

KH-71 

1 

0 

54.1 

7 

KH-72 

1 

1 

63.0 

Ground  and  lock  lights  flickering 
aborted  flight 

TOTALS 

7 

2 

63.0  operating  hours 

TABLE  2.4  MAINTAINABILITY  AND  AVAILABILITY  INDICES  FOR  GCS  001 
Average  Maintenance  Time 


Clock  Hour 

Man  Hours 

MTBM  HR 

E bL 

Scheduled 

.50 

1.37 

5.25  hr 

Unscheduled 

.66 

.87 

9.00  hr 

Combined 

.56 

1.19 

3.32  hr  .36 

.56  hr  .93 

.86 
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2.1.3  Analysis  of  Aggregated  GCS  RAM  Data 

By  combining  the  Information  in  Tables  2.1  and  2.3,  there 
are  a total  of  29  equipment  failures,  9.66  mission  failures,  and  351.5 
operating  hours  accumulated  on  the  two  ground  control  stations  used 
during  government  testing.  With  these  values,  the  following  MTBF's 
and  reliabilities  for  the  GCS  subsystem  were  estimated: 


Equipment  MTBF 

Equipment  Reliability  (t  • 3.2  hours) 
Mission  MTBF 

Mission  Reliability  (t  ■ j.Z  hours) 


12.12  hours 
.76 

36.39  hours 
.92 


The  maintainability  and  availability  indices  for  the  GCS  subsystem 
are  presented  in  Table  2.5.  Again,  separate  values  are  given  for  the 
unscheduled  maintenance  parameters  for  contractor  and  overall  maintenance 
due  to  the  unscheduled  major  GCS  overhaul  after  the  crash  of  RPV  022. 

(Section  2.1.1.) 


There  were  few  mai  tenance  difficulties  associated  with  the 
GCS  subsystem;  most  difficult  ;s  were  in  the  area  of  human  factors. 
Some  of  the  problems  experien.:ed  during  GCS  maintenance  were; 


1)  Repair/ replacement  parts  were  inadequate.  Spare  light 
bulbs  and  fuses  for  the  GCS  were  not  provided.  Cannibalization  from  one 
GCS  to  the  other  was  sometimes  required  to  effect  repairs. 

2)  During  emplacement  of  the  GCS,  extreme  difficulty  was 
experienced  while  attempting  to  level  the  2 1/2  ton  cargo  truck  contain- 
ing the  GCS  to  prescribed  tolerances. 

•3)  Maintenance  personnel  encountered  extreme  difficulty  in 
the  repair  and  maintenance  of  the  #2  topaz  frequency  changer.  The  two 
units,  weighing  more  than  one  hundred  pounds  each,  require  more  than 
one  person  to  handle.  The  #2  unit,  located  beneath  the  main  control 
console,  cannot  be  reached  by  more  than  one  person  at  a time  during 
installation  or  repair.  One  member  of  the  player  platoon  sustained  a 
back  injury  when  attempting  to  remove  the  #2  unit.  This  injury  was 
caused  by  a lack  of  hand  holds,  the  weight  and  the  poor  location  of  the 
unit. 


The  test  results  showed  a mission  reliability  of’ .92  based 
on  a 3.2  hour  mission.  The  requirement  for  the  GCS  subsystem  at  IOC  is 
.92  (MTBF  ■ 120  hours);  however,  this  is  based  on  a 10  hour  day  of 
continuous  operation.  Using  a 10  hour  base  and  the  MTBF  of  36.39  hours 
exhibited  during  the  FDT4E/EDT,  a mission  reliability  of  .76  is  determined 
by  using  the  exponential  failure  distribution.  Thus,  engineering  improve- 
ments and  military  hardening  will  be  necessary  on  the  ED  systems  GCS 
in  order  to  meet  this  requirement. 
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2.2  RAM  Characteristics  the  RPV  Subsystem 
2.2.1  Analysis  of  FDT&E  RAH  Data  on  the  RPV  Subsystem 

The  FOTiE  test  personnel  operated  RPV's  014,  016,  018,  020 
and  022.  The  EP6  test  personnel  also  operated  RPV's  014  and  018  after 
the  FOT&E  was  terminated.  The  operating  time  on  these  two  RPV's  Is  not 
Included  here  but  Is  discussed  separately  In  the  EPG  analysis  section, 
2.2.2,  and  collectively  In  the  aggregated  data  analysis  section,  2.2.3. 

The  RPV'i  experienced  numerous  failures  during  the  conduct 
of  the  test.  Most  of  these  failures  were  not  catastrophic.  Table  2.6 
lists  the  failures  scored  against  the  RPV  subsystem  during  the  FDT4E. 

The  failure  recorded  on  EPR  KE-128  (28  September)  was  the  only  failure 
of  the  RPV  subsystem  which  resulted  In  a crash  during  the  FDTiE.  This 
failure  Is  suspected  (but  not  confirmed)  to  be  a quality  control 
problem  where  a counterweight  on  the  engine  came  off  In  flight  causing 
the  engine  to  quit.  Two  other  RPV's  crashed  during  the  conduct  of  the 
FOT&E,  neither  of  which  was  caused  by  a fallui'e  of  the  RPV  subsystem. 

The  first  crash  on  19  August  1977  was  caused  by  a s1nc*lock  slip  In  the 
data  link  and  Is  listed  as  a GCS  failure  (see  Table  2.1,  item  9).  The 
second  crash  on  1 September  was  due  to  a human  error  prior  to  launch. 

A launch  crevenan  left  a small  wrench  on  the  wing  which  went  through  the 
propeller  at  launch,  destroying  It.  Several  other  failures  listed  In 
Table  2.6  could  have  resulted  In  a catastrophic  failure  had  they  not 
been  discovered  and  corrected  during  the  numerous  pre-flight  checks  and 
inspections.  These  proved  to  be  very  valuable  In  helping  to  Insure  a 
successful  flight  and  completion  of  the  test  mission  objectives. 

Of  the  32  RPV  equipment  fallurus  (excluding  quality  control 
Induced  problems),  nine  were  associated  with  the  engine  falling  to  either 
start,  stop  or  maintain  the  proper  RPM  or  temperature.  Engine  RPM 
problems  were  experienced  often  during  the  countdown  to  launch  and  were 
not  always  reported  as  failures.  The  engine  had  difficulty  obtaining 
the  desired  launch  and  Idle  RPM  speeds  during  the  launch  countdown. 

This  sometimes  resulted  In  a delayed  or  scrubbed  mission.  The  problems 
were  usually  alleviated  by  cleaning  or  changing  the  spark  plug,  by 
adjusting  the  carburetor,  or  by  allowing  extra  engine  warm  up  time. 

In  general,  the  engine  was  underpowered  for  some  of  the  missions  It  was 
required  ta  perform,  especially  for  the  Fort  Huachuca  altitude.  This 
engine  will  not  be  used  In  the  RPV  Engineering  Development  Program;  a 
new  engine  Is  currently  being  developed. 

Another  recurring  problem  was  cracking  of  the  copper  waveguide 
on  the  video  transmitter.  It  was  suggested  by  the  RAM  data  collectors 
that  a flexible  type  coaxial  cable  may  be  more  appropriate  and  may  help 
prevent  this  type  of  failure  from  recurring.  Several  other  repeated 
equipment  failures  were  exhibited  during  the  FDT&E.  Some  of  these  were: 
payload  protector  (3  failures),  flight  control  electronics  package  (2 
failures),  servo  actuator  (2  failures)  and  magnetometer  (2  failures). 
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018  KE-70  1*  0 0 0 27.7  50.0  Crimped  altitude  tra.isducer  tube 

018  KE-70  1*  0 0 0 27.7  50.0  Wing  attachment  screws 

018  KE-70  P 0 0 0 27.7  50.0  Weight  and  balance  attachments 

018  KE-71  1*  0 0 0 27.7  52.5  Cable  harness  to  sensor 
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These  and  many  of  the  other  types  of  failures  listed  in  Table  2.6  could 
be  eliminated  or  the  frequency  reduced  by  proper  design  and  manufacturing 
techniques. 

Table  2.7  lists  the  flTBF  and  reliability  estimates  for  each 
RPV  platform  and  for  the  total  RPV  subsystem.  Values  both  Including 
and  excluding  the  quality  control  failures  are  given.  These  values 
Mould  not  be  acceptable  In  the  EO  system.  It  Is  recognized  tnat  this 
system  was  not  designed  for  reliability  and  that  many  Improvements  will 
be  necessary.  Reliability  Is  estimated  assuming  an  exponential 
failure  distribution  with  an  average  mission  on-time  of  1.88  hours. 

•{The  FA3D  used  1.7  hours  In  their  analysis.)  This  was  found  by  adding 
the  average  of  1 .7  flight  hours  (46  flights)  and  the  average  engine  run 
time  on  the  launcher  of  .18  hours  (51  entries.  Including  both  flights 
and  scrubbed  missions).  Mean  time  between  failure  (MTBF)  is  based  on 
the  total  engine  running  time,  not  flight  hours  which  was  used  in  the 
FABO  analysis.  (See  Reference  A.)  Note  that  engine  run  time  differs 
slightly  from  all  time  (listed  In  Table  2.6)  In  that  all  time  also 
Includes  electrical  power  on  time  while  on  launcher  prior  to  engine  start. 

TABLE  2.7  RELIABILITY  PARAMETERS  FOR  THE  RPV'S  USED  BY  THE  FhSD  DURING  THE 
FDT&E.  VALUES  WHICH  INCLUDE  THE  QUALITY  CONTROL  FAILURES  ARE 
GIVEN  IN  PARENTHESES. 


RPV 

OPERATING 
TIME,  HRS 
FLT.  ENG. 

FAILURES 

EQUIPMENT  MISSION 

MTBF,  HOURS 
(ENGINE  ON  TIME) 
EQUIPMENT  MISSION 

RELIABILin 
(t  - 1.88  HRS) 
EQUIPMENT  MISSION 

014 

6.6 

7.8 

6(7) 

2 

1.3  (1.11) 

:.9 

.23(.18) 

.62 

*016 

18.2 

24.4 

12 

4 

2.03 

6.1 

.40 

.73 

018 

31.6 

34.5 

6(14) 

3(4) 

5.75(2.46)  11.5(8.62) 

.72(.'47) 

.35(.80) 

*020 

20.7 

23.2 

8(11 

5 

2.9(2.11) 

4.64 

.52(.4l) 

.67 

»022 

1.3 

1.8 

0(1) 

0 

(1.8) 

(.35) 

- ■■■ 

TOTAL 

78.4 

91.7 

32(45) 

14(15) 

3.18(2.26) 

7.27(6.79) 

.55(.43) 

.77(.76) 

♦Crash^  RPV^s  

According  to  the  FOT&E  RAM  data  col lectnrs/evalua tors,  the 
most  difficult  subsystem  to  maintain  wa?  the  RPV  subsysten..  The  number 
of  clockhours  and  man-hours,  both  corrective  and  preventative,  required 
on  the  RPV  per  flight  hour  may  be  considered  excessive  (see  Table  2.9) 
when  compared  to  the  ED  system  requirements.  Poor  equipment  design  and 
characteristics,  lack  of  sufficient  tools,  and  Inadequate  technical  manuals 
are  the  primary  reasons  for  the  difficulties  experienced  during  mainte- 
nance. Another  reason  for  the  inordinate  amount  of  RPV  maintenance  was 
the  poor  quality  control  exhibited  by  the  contractor.  Twenty-nine  per- 
cent of  the  equipment  failures  charged  to  the  RPV  subsystem  In  FDT&E 
were  due  to  a lack  of  proper  quality  control.  RPV's  were  received  from 
the  contractor  facility  with  such  things  as  missing  sensor  mounts, 
missing  battery  and  terminal  leads,  no  weight  and  ballast  fixtures. 
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TALLE  2.8  F0T4E  MAINTENANCE  ACTIONS  ON  THE  RPV  SUBSYSTEM 
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Pre-flight 
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Sensor  Installation 
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accelerometer  bracket  too  large,  sensor  wiring  harness  bundled  Improperly, 
and  Improperly  positioned  wing  attachment  bolt  holes.  Such  poor  quality 
control  should  not  be  allowed  to  continue  with  the  EO  system. 

Table  2.8  lists  the  types  of  maintenance  performed  on  the  RPV 
subsystem.  Some  Items  are  listed  as  specific  actions  while  others  are 
under  g^nc^ral  headings  due  to  the  large  numbers  of  actions  on  this  sub> 
system.  Aircraft  assembly  time  Is  not  Included  In  these  figures.  This 
accounts  for  the  differences  between  these  figures  and  those  presented 
in  the  FDTiE  report.  For  the  most  part,  unscheduled  maintenance  corresponds 
with  the  failures  listed  In  Table  2.6.  Some  examples  of  other  types  of 
unscheduled  mdntenance  are:  recovery  damage  repairs,  component  checks, 
and  f-leld  engineering  fixes. 

RPV  assembly  time  was  excluded  from  the  computations  because  this 
series  of  actions  Is  not  typical  of  the  average  scheduled  maintenance 
times  as  listed  in  Table  2.0.  Assembly  was  performed  on  only  three  of 
the  aircraft  (RPV  018,  020  and  022)  since  two  (RPV  014  and  016)  were 
received  In  an  assembled  configuration  from  the  contractor.  Assembly 
times  varied  widely  on  each  airframe  due  to  operator  Inexperience  and 
quality  control  problems  peculiar  to  each  of  the  airframes.  The  weight 
and  balance  times  and  sensor  Installation  times  during  assembly  of  the 
three  airframes  were  Included  In  the  averages  presented  In  Table  2.8. 

The  remainder  of  the  assembly  time  and  checkout  time  for  the  three  air- 
frames Is  sutnnarlzed  below  (the  figure  In  parenthesis  Includes  the  weight 
and  balance  and  sensor  Installation  times): 

RPV  018:  12.9  (16.6)  clock  hours,  27.2  (32.9)  man-hours 

RPV  020:  10.7  (13.2)  clock  hours,  19.2  (27.2)  man-hours 

RPV  022:  25  (29)  clock  hours,  33  (41)  man-hours 

All  these  times  should  be  reduced  In  the  EO  RPV  system. 

Table  2.9  summarizes  the  maintainability  and  availability  Indices  for 
the  RPV  subsystem.  Mean-time-between-maintenance  (MTBM)  and  the  avail- 
abilities are  based  on  the  engine  on-time  of  91.7  hours.  Maintenance 
ratio  (MR)  is  based  on  the  total  flight  time  of  78.4  hours. 


TABLE  2.9  , MAINTAINABILITY  AND  AVAILABILITY  INDICES  FOR  THE  RPV  SUBSYSTEM 
DURING  FDTiE 


Organ. /C 

Sch. 

rew(AVUM) 

Unsched. 

Contr 

Sch. 

•actor 

Unsched. 

All  Ma 
Ac 

Sch. 

Intenance 

tions 

Unsched. 

Avg  Cl-Hrs 
Avg  Man-Hrs 
MTBM 

MR 

ii 

N 

K 

1.6 

3.0 

.86  hr 
4.89  man 

1 .43  houi 

1.0 

1.5 

2.2  hr 
-hr/flt  hr 

rs 

2.6 

6.6 

18.3  hr 
2.39  man 

3.33  hou 

3.5 

7.4 

4.4  hr 
i-hr/flt  hr 

irs 

1.7 

^831^. 

2. 

3.2 
. 3.5 

53  I 1.48  hr 
28  man-hr/ 
fit  hr 

22  hours 

44 

23 

27 
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2.2.2  Analysis  of  EDT  RAM  Data  on  the  RPV  Subsystem 


The  EDT  test  personnel  operdted  RPV's  014,  017,  018,  019, 

021  and  023.  RPV  014  and  018  had  been  operated  during  the  FDT&E  and 
were  turned  over  to  the  EDT  at  the  termination  of  the  FOTiE. 

Numerous  failures,  most  of  which  were  not  catastrophic,  were 
experienced  on  the  RPV  subsystems  during  the  EDT.  Table  2.10  lists  the 
failures  scored  against  the  RPV  subsystem  during  the  EOT.  All  three 
RPV  crashes  during  the  EOT  were  due  to  failures  on  the  RPV.  On 
26  September  1977,  RPV  021  crashed  after  the  engine  quit  In  flight.  The 
engine  begr>n  having  RPM  problems  after  a manually  commanded  altitude 
reduction  and  died  whan  trying  to  Increase  the  throttle.  On  14  October 
1977,  RPV  017  crashed  after  a crankshaft  counterweight  broke  free  and 
made  a hole  In  the  engine  crankcase.  On  20  October  1977,  RPV  023 
crashed  due  to  a failure  of  one  of  the  Integrated  circuits  on  altitude 
control  card  A4.  A constant  RPM  conmand  of  4000  RPM  resulted  and  there 
was  no  response  to  Input  comr.iands. 

The  most  recurring  failure  during  the  EDT  was  failures  of 
the  eleven  servo  actuator.  There  were  seven  recorded  equipment  failures 
of  this  type.  This  type  of  failure  occurred  more  often  during  EDT 
than  during  F0T4E  (2  failures).  Some  of  the  failure  modes  associated 
with  the  elevon  servo  actuator  we/e  stripped  gears,  overheating,  short- 
ing or  open  circuiting.  Jamming  and  freezing  In  position,  and  being 
out  of  tolerance.  Spares  were  Insufficient.  A better  designed  actuator 
will  be  necessary  In  the  ED  program  to  reduce  the  number  of  failures 
on  this  piece  of  equipment. 

Engine  failures  also  presented  problems  during  the  EDT,  as 
they  did  during  the  FDT&E.  Four  incidents  were  recorded,  one  of  which 
caused  a crash.  These  were  all  associated  with  RPM  problems  and  engine 
dying  when  throttle  changes  were  commanded.  Four  other  failures  could 
also  be  considered  to  be  associated  with  the  engine.  These  were  failures 
of  the  throttle  caole  (KH-64),  crankshaft  counterweight  (KH-48)  which 
caused  a crash,  a broken  magneto  wire  (KH-53)  which  kept  the  engine 
from  being  killed  after  recovo’y,  and  a sheared  throttle  linkage  mount 
bolt  (KH-58).  As  stated  In  section  2.2.1,  this  engine  will  not  be 
used  In  the  ED  system;  a new  engine  Is  being  developed.  These  types 
of  failures  should  be  minimized  on  the  new  engine,  especially  the  RPM 
problems. 

There  were  three  failures  of  the  rate  gyro  and  two  on  the  A4 
card  In  the  Flight  Control  Electronics  Package  (FCEP).  The  failure  mode 
most  often  associated  with  the  rate  gyro  was  erratic  behavior  causing 
excessive  drift.  Failures  In  the  FCEP  were  due  to  a failed  IC  on  the  A4 
card. 

Table  2.11  lists  the  MTBF  and  reliability  estimates  for  each 
RPV  platform  and  for  the  total  RPV  subsystem  as  exhibited  during  tite  EDT. 
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10  Including  quality  control  induced  failures 


Estimates  both  including  and  excluding  the  quality  control  failure  are 
given.  These  estimates  were  made  by  assuming  an  exponential  failure 
distribution.  For  consistency  in  this  analysis,  the  average  mission 
time  of  l.Sc?  hours  found  during  the  FDT&E  is  used  instead  of  the  1.6 
hours  used  in  the  EOT  analysis  performed  by  EPG.  MTBF  is  based  on  the 
total  engine  running  time,  not  on  flight  time  which  was  used  in  the  EPG 
analysis  (see  Reference  2).  These  two  differences  account  for  the  slight 
differences  between  this  analysis  and  the  EPG  analysis. 

From  the  low  reliabilities  shown  in  Table  2.11,  it  is  apparent 
that  many  ir.iprovamsnts  will  be  necessary  to  insure  that  the  RPV  subsystem 
meets  the  requirements  specified  for  the  ED  system.  The  re'^iability 
figures  in  Table  2.11  are  slightly  lower  than  those  found  during  the 
FDT&E  (see  Table  2.6). 

As  during  the  FDT&E,  maintenance  on  the  RPV  was  also  a problem 
during  the  EDT.  Two  major  maintenance  problems  during  EDT  were  most 
prominent.  The  first  was  that  there  was  insufficient  space  in  the  RPV 
for  placing  the  hands  when  the  elevon  servo  actuator  and  tl:e  sensor 
package  had  to  be  removed.  It  was  recommended  in  the  EDT  test  report 
that  handles  or  lifting  brackets  be  placed  on  the  sensor  package.  The 
second  problem  mentioned  was  that  it  was  easy  to  place  the  propeller  on 
backwards.  Markings  were  insufficient  for  determining  the  proper 
orientation.  Proper  markings  or  designing  so  that  the  propeller  only 
fits  one  way  would  alleviate  this  problem.  In  general,  maintenance  on 
the  RPV  was  difficult  and  time  consuming.  It  was  remarked  that  the  only 
easy  part  to  replace  was  the  rate  gyro. 

Table  2.12  summarizes  the  maintainability  and  availability 
indices  for  the  RPV  subsystem  during  EDT.  Mean-time-between-maintenance 
(MTBF)  and  availability  estimates  are  based  on  the  total  engine  on-time 
of  56.1  hours.  (EPG  based  their  calculations  on  flight  time.)  Mainte- 
nance ratio  (MR)  is  based  on  the  total  flight  time  of  45.3  hours. 


TABLE  2.12  MAINTAINABILITY  AND  AVAILABILITY  INDICES  FOR  THE  RPV 
SUBSYSTEM  DURING  EDT 


Organ. /Crew 

Contractor 

All  Maintenance 

Sched. 

Unsched. 

Sched.  Unsched. 

Sched. 

Unsched. 

Avg  Cl-Hrs 

1.72 

1.02 

1.72 

1.02 

Avg  Man-Hrs 

4.21 

1.49 

Not  Recorded 

4.21 

1.49 

MTBM 

.78  hr 

1.87  hr 

• 

00 

• 

55  |l.87  hi 

MR 

7.68  man-hr/ 

7. 

68  man-hr/ 

Tit  hr 

fit  hr 

M 

1.50  hours 

1. 

SO  hours 

• 

65 

- 

27 

31 


2.2.3  Analysis  of  Aggregated  RPV  RAM  Data 


To  determine  the  overall  RAM  Indices  of  the  RPV  subsystem 
during  government  testing,  the  data  presented  In  Sections  2.2.1  and 
2.2.2  were  combined.  Table  2.13  sunar, arizes  the  number  of  failures, 
operating  time,  MTBF  and  reliability  experienced  by  the  RPV  subsystem. 
MTBF  Is  based  on  the  engine-on  time  and  all  reliability  estimates  are 
based  on  an  average  mission  duration  of  1.88  hours. 

These  values  of  MTBF  and  reliability  would  not  meet  the  ED 
system  requirements.  Many  Improvements  would  be  necessary  on  the  AQUILA 
RPV  subsystem  to  bring  It  up  to  the  requirements  specified  In  the  ROC. 

The  failures  which  occurred  most  frequently  are  reiterated  below: 

Engine  failures  (RPM,  throttle,  carburetor,  magneto,  crank- 
shaft problems):  21  equipment,  13  mission 
Eleven  servo  actuator  failures:  9 equipment,  2 mission 
FCEP  failures:  4 equipment,  2 mission 
Rate  gyro  failures:  4 equipment,  1 mission 
Copper  waveguide  failures:  4 equipment 
Payload  protector  failures:  3 equipment 

As  stated  In  the  previous  two  sections,  maintenance  on  the 
RPV  subsystem  was  difficult  and  time  consuming.  Poor  equipment  design 
and  characteristics,  poor  layout,  poor  quality  control,  lack  of  sufficient 
tools,  and  Inadequate  technical  manuals  are  the  reasons  given  most  often 
for  the  difficulties  experienced  In  RPV  maintenance.  Table  2.14 
summarizes  the  maintainability  and  availability  Indices  for  the  overall 
RPV  subsystem  as  exhibited  during  government  testing.  HTBM  and  the 
availabilities  a»e  based  on  the  total  engine  on-time  of  147.3  hours. 

MR  Is  based  on  the  total  flight  time  of  123.7  hours.  In  view  of  the  ED 
system  requirements,  an  excessive  amount  of  time  and  man-hours  was  spent 
on  all  maintenance  actions.  Many  man-hours  were  spent  on  RPV  maintenance 
In  order  to  achieve  1 flight  hour  (I.e.,  MR  » 7.4  man-hours  per  flight 
hour). 


2.3  RAM  Characteristics  of  the  Sensor  Subsystem 

2.3.1  Analysis  of  FOT&E  RAM  Data  on  the  Sensor  Subsystem 

The  FDT&E  test  personnel  operated  Phases  I,  III,  IV  and  V 
sensor  packages.  A Sony  camera  was  used  occasionally  to  check  out  a new 
RPV  platform  on  Its  first  flight;  this  camera  Is  not  part  of  the  evaluation 
The  FOT&E  test  team  was  only  Interested  In  testing  phases  III,  IV  and  V. 
Thus,  the  single  failure  for  the  Phase  I sensor  was  not  Included  In  their 
reliability  analysis.  However,  Phase  I maintenance  times  and  operating 
times  were  Included,  thus  giving  an  Incorrect  representation  of  the  RAM 
parameters  for  the  FDT&E  test.  For  consistency,  this  analysis  will 
Include  all  FDT&E  Phase  I sensor  RAM  data  in  this  section  and  in  the 
aggregation  section. 
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TABLE  2.13  RELIABILITY  PARAMETERS  FOR  THE  RPV'S  USED  DURING  GOVERNMENT  TESTING.  VALUES 


Table  2.15  lists  the  failures  -jcored  against  the  sensor  sub- 
system during  the  FDT&E.  The  predominant  failures  were  cage  motor 
failures,  dome  moisture,  dome  cracks,  elevation  pot  unadjustable  and 
poor  video.  Many  of  these  and  other  failures  were  due  to  poor  design 
and  quality  control.  Great  differences  existed  among  what  were  supposed 
to  be  identical  sensor  packages.  Several  failures  originally  charged 
to  the  caging  mechanism  and  to  dome  moisture  were  deleted  by  the 
scoring  conference.  The  caging  failures  due  to  software  commands  and  not 
to  the  equipment  itself  were  deleted.  Four  dome  moisture  equipment 
failures  were  deleted  because  a field  fix  all  but  eliminated  that  failure 
mode.  The  original  failure  was  charged  (KE-55)  and  one  failure  after 
the  field  fix  was  charged  {KE-130).  The  fix  consisted  of  purging  the 
sensor  package  with  dry  nitrogen  and  installing  a desiccant  package  in 
the  breather. 


TABLE  2.15  FAILURES  ASSOCIATED  WITH 


THE  FDTSE 

Phase 

Failure 

Score 

(Serial  #) 

EPR  # 

ia. 

His. 

IV  (401) 

KE-14 

1 

1 

I (T-12) 

KE-34 

1 

1 

IV  (401) 

KE-46 

1 

0 

V (504) 

KE-52 

1 

0 

V (504) 

KE-55 

1 

1 

IV  (401) 

KE-76 

1 

0 

IV  (401) 

KE-89 

1 

0 

IV  (401) 

KE-94 

1 

0 

IV  (401) 

KE-95 

1 

1 

III  (302) 

KE-105^ 

1 

0 

III  (302) 

KE-105  ' 

1 

0 

IV  (403) 

KE-107  I 

1 

1 

IV  (403) 

KE-110 

1 

1 

IV  (403) 

KE-113  1 

1 

0 

IV  (403) 

KE-115  \ 

1 

0 

III  (304) 

KE-118  ' 

1 1 

1 

IV  (403) 

KE-130 

1 

1 

IV  (403) 

KE-131 

1 

0 

V (501) 

KE-135 

1 

0 

TOTALS 

19 

8 

THE  SENSORS  WHICH  WERE  USED  DURING 


Description  of  Failure 

Poor  video 

Not  responding  to  commands 
Not  responding  properly  prior  to 
launch 

Sensor  would  not  go  below  -55° 
elevation 
Dome  condensation 
Slewing  and  caging  difficulties 
Laser  failed  to  fire  due  to  battery 
Dome  cracked  at  launch 
Elevation  pot  unadjustable 
Set  screw  in  azimuth  drive  gear 
fell  out 
Caging  motor 

Autotracker  failed  during  bore- 
sighting 

Caging  motor  overheated 
Elevation  adjustment  inoperative 
Dome  cracked 

Video  degraded  and  then  lost 
Dome  condensation  (after  field  fix) 
Cage  pin  problems  during  boresighting 
Autotracker  failed  during  boresighting 
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The  operating  time,  failures,  MTBF  and  reliability  for  each 
sensor  package  (by  phases)  are  listed  In  Table  2.16.  Again,  the  Phase 
1 nimbers  are  Included  In  the  total.  The  total  operating  times  are  used 
for  the  HTBF  estimates,  as  opposed  to  flight  time  which  was  used  In  the 
FABO  analysis.  The  total  flight  time  and  operating  time  for  the  sensor 
subsystem  differ  from  that  listed  for  the  RPV  subsystem  primarily  for 
two  reasons:  boresight  and  other  ground  operation  time  are  Included,  and 
Sony  camera  time  Is  excluded.  For  consistency  with  the  RPV  subsystem, 
all  reliability  estimates  are  based  on  a mission  duration  of  1.88  hours 
and  the  exponential  failure  distribution  Is  assumed.  All  of  these  factors 
a itrlbute  to  the  differences  between  the  reliabilities  shown  In  Table 
2.16  and  those  calculated  by  the  FABO,  which  were  based  on  a total 
flight  time  of  77.7  hours  and  an  average  mission  time  of  1,7  hours 
(see  Reference  3). 


TABLE  2 .16  RELIABILITY  PARAMETERS  FOR  THE  SENSOR  SUBSYSTBI  AS  EXHIBITED 
DURING  THE  FDT&E.  THE  PHASE  I VALUES  ARE  INCLUDED  IN  THE 
TOTALS. 


Phase 

Operating 

Time 

(Hour) 

Fllqhi  Total 

Failures 

Equipment  Mission 

MTBF 

(Hour) 

Equipment  Mission 

Reliability  j 

(t  • 1.88  hours) 
Equipment  Mission 

I 

II 

III 
TV 

V 

2.6  4.8  1 

NOT  USi 
15.5  20.3 

40.7  65.0 

17.1  28.1 

1 1 

■D  IN  F0T4E 

3 1 

12  5 

3 1 

4.8  4.8 

6.8  20.3 

5.4  13.0 

9.4  28.1 

.68  .68  1 

1 

.76  .91  f 

.71  .86  j 

.82  .93  ! 

TOTAL 

75.9  118.2 

19  8 

6.2  14.8 

.74  .88  1 

'V 


Maintenance  at  the  crew/organizational  level  was  limited  primarily 
tn  sensor  removal  and  Installation,  boresighting,  bench  checks,  laser  battery 
changing/charging,  purging  dome  with  nitrogen,  and  repairing/replacing  the 
dome.  On-site  sensor  repairs  by  the  contractor  were  limited  to  the  extent 
above  plus  other  minor  repairs;  major  repairs  necessitated  the  return  of 
the  sensor  package  to  the  factory.  Table  2.17  lists  the  types  of  mainten- 
ance performed  on  the  sensor  subsystems.  The  average  maintenance  action 
at  the  crew/organizational  level  took  1.1  hours  to  perform,  utilizing  2.84 
man-hours . 


36 


/■ 


iA 

GL 

O 

</) 


S 

\A 

a: 

o 

pm 


O 

5 

Z 

Ul 

s 


rl 


(A 

IL 

fl  O 'O  <•> 

O Id  O ro  GO  O 

vr 

4r 

<M  iO  CO 

CM  CO  CM 

Z 

ID 

o CM  in 

CO  CM 

c 

C 

^ €n  •— 

CO 

CO 

CM  CO  CM 

CO  CM  CO 

•o  o 

U f- 

X 

T}  « 
C f- 

\A 

<0  > 

U 

^ ID  ^ ^ 

CO 

CMO  CO 

^ o 
rs.  CM  o 

• • « 

«/)  O 

z 

1 

cn  o ID  o 

rv 

• 

a 

Cl  CM  O 

• ft  ft 

o 

VI 

fm 

• 

X 

OD^  <*)  O •—  0> 

Cl 

in 

'T  l« 

^ ID  UO 

• 

^ CO  CM  ID  ID  O 

o 

IO  l>>  O 

00  CM 

c 

• 

• 

ft 

ft  ft  ft 

• • ft 

r—  ^ ID  CM 

CO 

CO 

^ CM  CM 

CM  CM  CM 

e 

X 

VI 

in  <M  po  Q ^ 

CM  >-  <M  4A  0>  0\ 

'S 

in 

o\ 

CO  Cl  Cl 

o o o 

z 

1 

4r 

o 

CM  ID  CO 

^IDp- 

^ r—  ^ 

f>»  ^ 

M» 

u 

VI 

*A 

u 

b 

X 

Cl  O oi 

Cl 

«o 

ID  in  ^ 

incMi^ 

a 

1 

• 

ft 

ft  ft  ft 

• ft  ft 

a 

c 

ID  iD  ID  Cl  O 

CO 

iO 

Cl 

r»«ft  ID  c*« 

<Q 

^ ^ CM 

Cl 

o 

CM  CM  in 

CM  CO  ID 

X 

CM 

CM  CM 

_. 

« 

VI 

o 

w 

o ^ o ^ 

« 

ID 

»—  w o 

oi  «o  in 

1- 

z 

1 

:n  CO  in  CM  Cl 

in 

00 

4r 

ft  ft  ft 

CM  ID  Cl 

in  CO 

^ CM^ 

ID 

CM  p-  CO 

OOCMf— 

O 

P“ 

VI 

w 

e 

4» 

o 

^ <*- 

^ CM  CO  O CO  O 

CM 

ID 

00 

00  O 00 

o «0  lO 

e o .M 

^ ^ CM  »— 

ID 

ID 

r-  •—  CM 

OOr-Ol 

a 

z 

a 

•o 

r-  O 

41 

^ 4i* 

VI  u 

fw 

lO 

c 

e 

VI 

o 

o 

e 

e 

4-> 

<0  'v. 

40 

u 

u c 

N 

■o  T5 

■*■  o 

4>  41 

VI 

c 

p-  ^ ^ 

« 

•o  v»  -U 

lO 

c 

a a 41 

u 

« 41  iO*T3 

c 

"C 

T3  ^ 

t>  V V 

c 

Ti»—  T}  I.  «» 

a 

41 

41  a>  a 

u u u 

m 

o 

•c 

z Z *0 

c c c 

c 

> 10  Cl  Cl  o.  a 

4> 

a 

U U 4» 

40  «0  01 

5 

Q '*■>  C C O TS 

s 

Z 

*c 

VI  Z 

c c c 

S VI  41 

c 

u 

c 

ecu 

V « 41 
^ 4^  44 

c 

S c Cl  ci'M  z 

u 

VI 

z 

a a VI 

1.  u b X o 

o 

u 

c 

e •:  c 

a a Cl  VI 

VI 

^ p*  a 

b b o.  a.'f 

o O ^ b 

40 

u 

S 2^ 

ill 

VI  VI  c 4)  4»  41 

40 

w 

01  41  40 

C C g g b X 

4-> 

c 

•4-> 

C C 44 

mm  mm  ^m 

41  41  O O O 4-> 

o 

c 

o 

w « o 
u>  O h- 

^ 

CD  ID  O O GO  O 

b- 

C9 

I— 

<<< 

L. 

b 

b 

• 

Cl 

o 

4-> 

• o 

CI4> 

a>3 

u 

U 

b u 

u u 

41 

o 

O 40 

O (ft 

> 

U 

^ U 

^ im 

4> 

y 

4^ 

z 

% 44  Z 

^ 44  z 

C 

U C 4> 

U C 44 

£> 

o 

o 

boo 

boo 

O 

o 

CO 

o o z 

O O CD 

a3ina3H0s 

•HOSNn 

37 


\ 

\ 


During  the  FOTiE,  laser  boresight  operations  were  difficult. 
Two  factors  were  the  primary  contributors:  (1)  the  hookup  to  the  sensor 
control  panel  vas  made  difficult  by  the  required  removal  of  the  access 
panel  and  one  of  the  electronics  packages,  and  (2)  the  displays  on  the 
sensor  control  panel  were  difficult  to  read.  The  second  difficulty 
was  due  to  the  fact  that  red  Light  Emitting  Diodo  (LED)  displays  were 
used.  These  were  difficult  to  read  in  sunlight  and  almost  impossible  to 
read  when  the  laser  goggles  (which  filters  out  red)  were  used.  A liquid 
crystal  type  of  display  may  be  a better  choic  for  the  sensor  control 
panel  used  for  boresight  operations. 

Table  2.13  summarizes  the  maintainability  and  availability 
indices  for  the  sensor  subsystem.  MTBM,  Ai  and  Aa  estimates  are  based 
on  the  total  on-time  of  118.2  hours.  MR  is  based  on  a total  flight  time 
of  75.9  hours. 

2.3.2  Analysis  of  EDT  RAM  Data  on  the  Sensor  Subsystem 

The  EDT  test  personnel  tested  all  five  phases  of  the  sensor 
packages.  A Sony  camera  was  used  occasionally  to  check  out  a new  RPV 
platform,  but  is  not  included  as  part  of  the  sensor  RAM  analysis. 

Table  2.19  lists  the  failures  scored  against  the  sensor  subsystem  during 
the  EDT.  The  predominant  failures  were  lack  of  control  of  the  sensor 
and  caging/uncaging  problems.  The  other  failures  were  singular  incidents 
during  the  EDT. 


TABLE  2.19  FAILURES  ASSOCIATED  WITH  THE  SENSORS  WHICH  WERE  USED  DURING 
THE  EDT 


. Phase 
(Serial  #) 

EPR  # 

mm 

msm 

KiSBi 

uescnpiion  ot  rdiiure 

I (T-13) 

KH-8 

1 

.33 

No  azimuth  control  during  flight 

I (T-13) 

KH-11 

1 

.33 

Camera  did  not  slew:  no  control 

111(304) 

KH-27 

1 

1 

Video  loss  due  to  overheating 

111(302) 

KH-44 

1 

0 

Stuck  in  caged  position 

I (T-6) 

KH-59 

1 

1 

Video  fuzzy;  filters  inoperative 

II  (28396) 

KH-66 

1 

1 

Take  up  spool  drive  motor  defective 

IV  (403) 

KH-67 

1 

.5 

Cage/uncage  problem 

IV  (403) 

KH-67 

1 

.5 

Weak  laser  battery  caused  gross 
rangefinder  errors 

TOTALS 

8 

4.66 
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Table  2.20  lists  the  operating  time,  failures,  MTBF  and 
reliability  for  each  sensor  package  (by  phases).  Phases  IV  and  V are 
combined  for  the  following  reasons:  (1)  EPG  data  did  not  list  the 
operating  time  separately,  (2)  there  were  no  failures  of  the  Phase  V 
sensor,  and  (3)  these  two  sensor  packages  are  virtually  Identical.  The 
reliabilities  listed  differ  from  those  shown  In  the  EOT  test  report. 

The  EOT  reliabilities  were  estimated  using  a mission  time  of  1.6  hours, 
whereas  the  reliability  estimates  In  Table  2.20  are  based  on  1.88  hours 
which  Is  * throughout  this  report  as  the  average  on-time  for  the  RPV 
and  sens'  . ^sterns. 


table  2.20  RELIABILITY  PARAMETERS  FOR  THE  SENSOR  SUBSYSTEM  AS 
EXHIBITED  DURING  THE  EDT 


IHRHHIil 

Phase 

Flight 

Total 

mii 

HSi 

Equip. 

Mis. 

mm 

mm 

■■ 

o 

18.6 

D 

1.66 

6.2 

11.2 

.74 

.84 

D 

O 

oe. 

o 

8.3 

1 

1 

8.3 

8.3 

.80 

.80 

il 

UJ 

►- 

12.8 

1 

6.4 

12.8 

.74 

.86 

o 

2 

7.2 

1 

3.6 

7.2 

.59 

.77 

46.9 

8 

4.66 

5.9 

10.1 

.72 

.84 

The  only  maintenance  on  the  sensors  recorded  by  the  EDT  RAM 
data  collectors  was  unscheduled  sensor  removals  where  the  sensor  was  sub- 
sequently turned  over  to  the  contractor  for  repair.  Contractor  RAM  data 
and  scheduled  maintenance  at  the  crew/organizational  level  were  not 
recorded.  Table  2.21  suimiarizes  the  maintainability  and  availability 
Indices  for  the  sensor  subsystem  exhibited  during  the  EDT.  The  numbers 
listed  under  the  "All  Maintenance"  heading  are  not  representative  of 
the  parameters  listed  because  of  the  data  voids.  Because  of  the  lack  of 
maintenance  data,  these  values  will  not  be  Included  1n  the  data 
aggregation. 
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TASLE  2.21  I’AIMTAINASILITY  AND  AVAILABILITY  INDICES  FDR  THF  SFNSDR 
SUDSYSTEfl  DURING  EDT 


Organi: 

Crav 

ational/ 

(AVU.M) 

Contractor 

(AVIM) 

All  Maintenance 
Actions 

Sched. 

Unsched. 

Sched.  Unsched. 

Sched. 

Unsched. 

Avg  Cl'Hrs 

.3 

NO  DATA 

.3 

Avg  Man-Hrs 

.3 

.3 

MTGM 

6.7  hr 

6.7  hr 

MR 

.045 

.045 

.3  hr 

.3  hr 

.96 

• 

.96 

2.3.3  An''<lvsis  of  Angronatod  Sonsor  RAM  Data 

The  data  presented  In  Sections  2.3.1  and  2.3.2  were  combined 
to  determine  the  overall  RAM  Indices  of  the  sensor  subsystem  during  all 
government  testing.  Table  2.22  summarizes  the  number  of  failures, 
operating  time,  MTBF  and  reliability  e.xperienced  by  the  sensor  sub- 
system. MTBF  is  based  on  the  total  operating  time  and  all  reliabilities 
are  based  on  an  average  mission  duration  of  1.B3  hours. 

There  were  several  pattern  failures  of  the  s'nsor  during  the 
government  testing.  The  most  prevalent  failures  were  S'^nsor  caging 
problems  (6  incidences),  poor  video  and  video  loss  (4  intidences), 
and  sensor  not  responding  properly  to  the  given  command  (3  incidences). 
Dome  condensation  was  also  a big  problem,  and  all  but  two  of  these 
failures  were  deleted  due  to  a field  fl.x  which  eliminated  this  failure 
mode  (except  for  a singular  occurrence  after  the  fix).  Problems  with 
the  caging  primarily  Involved  the  caging  motor  or  failure  of  the  pin  to 
properly  sot  and  hold  the  sensor  in  place  during  launch  or  recovery. 
Several  caging  failures  were  deleted  because  they  were  not  hardware 
oriented,  but  were  due  to  a software  problem  in  the  GCS.  Other  n joated 
failures  were  laser  battery  failures,  dome  cracking,  elevotion  pot 
failures  and  autotracker  failures. 

Maintenance  on  the  sensor  at  the  crew/organizational  level 
was  limited  primarily  to  sensor  removal  and  installation,  boresighting, 
tench  checks,  laser  battery  changing/charging,  dome  purging  and  repair/ 
replace, nont  of  the  dome,  Majo**  repairs  necessitated  the  return  of  the 
!;onsor  to  the  factory.  The  FDT&E  RAM  data  collectors  maintained  good 
.■•ecords  of  all  scheduled  and  unscheduled  maintenance  actions  performed 
at  the  crow/organizational  level  and  at  the  contractor  level  (on-site). 
The  EDT  RAM  data  collectors  only  reported  unscheduled  sensor  peniovals 
for  repair  by  the  contractor.  There  is  insufficient  infonnation  avail- 
able to  aggregate  the  data  from  the  two  tests.  Therefore,  the  more 
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complete  FDT&E  maintenance  data  analysis  is  repeated  here  in  Table  2.23 
as  being  the  best  representative  of  the  sensor  subsystems  during  govern- 
ment testing.  MTBM,  and  estimates  are  based  on  the  FDT&E  total 

on-time  of  118.2  hours.  MR  is  based  on  the  FOT&E  total  flight  time  of 
75.9  hours.  The  low  availabilities  and  the  high  MR"  both  may  be  unaccept- 
able in  the  ED  program. 


TABLE  2.22  RELIABILITY  PARAMETERS  FOR  THE  SENSOR  SUBSYSTEMS  USED 
DURING  GOVERNMENT  TESTING 


Sensor 

Phase 

operating  Time 
(Hours) 

“allures 

MTBF 

(Hours) 

Reliability 

Eouip.  Mis. 

Equip.  Mis. 

Equip.  Mis. 

I 

II 

III 

IV/V 

01 

ts  23.4 

•S.  8.3 

i 33.1 

g 100.3 

_ 

4 2.66 

1 1 

5 2 

17  7 

5.8  8.8 
8.3  8.3 
6.6  16.5 

5.9  14.3 

.72  .81 
.80  .80 
.75  .89 
.73  .88 

jylQjlll 

165.1 

27  12.66 

6.1  13.0 

.73  .86 

TABLE  2.23  MAINTAINABILITY  AND  AVAILABILITY  INDICES  FOR  THE  SENSOR  SUB- 
SYSTEM DURING  FDT4E.  THESE  VALUES  ARE  THE  BEST  AVAILABLE 
REPRESENTATIVES  OF  THE  MAINTAINABILITY  AND  AVAILABILITY 
INDICES  FOR  THE  SENSOR  SUBSYSTEM  DURING  GOVERNMENT  TESTING. 


Organizational/Crew 

(AVUM) 

Contractor 

All  Maintenance 
Actions 

Sched. 

Unsched. 

Sched. 

Unsched. 

Sched. 

Avg  Cl-Hrs 
Avg  Man-Hrs 

MTBM  (hours) 

MR 

1.0 

3.2 

1.9 

3. 

1.1 

1.2 

1.6 

6.6* 

3 man-hr/ 
fit  hr 

hours 

1.4 

1.4 

19.7 

1 

1.7 

2.7 

11.8 

.5  man-hr/ 
fit  hr 

.6  hours 

1.1 

3.0 

1.7|  1. 
3. 

1. 

• 

• < 

1.4 

2.0 

2 1 4.2 

5 man-hr/ 
fit  hr 

2 hours 

75 

51 

2.4  RAM  Characteristics  of  the  Launcher  Subsystem 
2.4.1  Analysis  of  FDT&E  RAM  Data  on  the  launcher  Subsystem 

The  FDT&E  test  team  used  launcher  number  9754  throughout  the 
FOTSE.  There  were  very  few  failures  of  this  launcher  during  the  test. 
Table  2.24  lists  the  failures.  The  predominant  failure  was  the  spring 
pin  on  the  starter  motor  drive  shaft  shearing  when  engine  start  was 
conmanded.  It  was  thought  that  this  failure  was  due  to  the  large 
number  of  engine  starts  causing  the  spring  pin  to  wear  out.  This  was 
only  partially  true.  It  was  discovered  on  the  last  failure  (KE-119) 
that  the  brass  bushing  through  which  the  pin  Is  placed  was  wearing  In 
an  oblong  manner  allowing  excessive  fre*  play  on  the  drive  shaft.  This 
was  causing  the  frequent  failures  of  the  spring  pin.  The  brass  .‘:ush1ng 
was  rotated  90  degrees  and  redrilled  to  allow  Installation  of  the  spring 
pin.  This  type  of  failure  was  not  repeated  again.  Even  with  this  fix, 
however.  It  can  be  expected  that  the  spring  pin  would  fall  again  after 
repeated  launches  or  when  the  bushing  again  wears  out. 


TABLE  2.24  FAILURES  ASSOCIATED  WITH  THE  LAUNCHER  WHICH  WAS  USED 


DURING  THE  FDTSE 

Failure  Score 

EPR  # 

Eq. 

Mis. 

Description  of  Failure 

1 

KE-16 

1 

0 

Crack  In  right-hand  shuttle  FDD  guard 

2 

KE-27 

1 

0 

Regulated  24  VDC  povier  supply  cycling 
Intermittently 

3 

KE-42 

1 

1 

Spring  pin  In  starter  motor 

4 

KE-84 

1 

1 

Pressure  transducer  failed 

5 

KE-102 

1 

0 

Spring  pin  In  starter  motor 

6 

KE-119 

1 

1 

Spring  pin  In  starter  motor 

TOTALS 

6 

3 

98.6  operating  hours,  50  launch 
attempts,  47  successful  launches 

The  launcher  was  operated  (power-on)  for  98.6  hours.  The 
107  hours  reported  In  the  FDT&E  report  Is  Incorrect  due  to  addition 
errors.  There  were  50  launch  attempts.  Including  an  EPG  launcn  and 
dry  runs,  and  47  successful  launches.  There  were  actually  59  attempts 
to  launch,  but  those  mission  aborts  were  due  to  problems  not  related 
to  the  launcher  and  were  not  charged  as  launch  attempts.  The  on-times 
for  those  aborts  were  Included  In  the  determination  of  the  average 
on-time,  however.  The  reliability  estimations  using  the  exponential 
failure  distribution  are  based  on  the  average  of  all  the  laungher 
on-t1mes  of  1.5  hours.  Based  on  the  above  Information,  the  following 
reliability  parameters  were  estimated: 
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Equipment 


Mission 


MTBF 

^1^-  16.43  hr 

« 32.87  hr 

Reliability 

.91 

.95 

Probability  of  Successful 
Launch 

NA 

MLBF 

47 

■ 7.8  launches" 

47 

15.6  launches 

Probability  of  successful  launch  is  defined  as  the  number  of  successful 
launches  divided  by  the  number  of  attempted  launches.  This  excludes 
attempted  launches  scrubbed  due  to  failures  of  subsystems  other  than 
the  launcher.  Mean-1 aunches-between-fai lures  (MLBF)  is  defined  as  the 
number  of  successful  launches  divided  by  the  number  of  failures. 

With  one  exception,  all  scheduled  maintenance  at  the  crew/ 
organizational  level  were  pre-launch  preventative  maintenance  checks. 

The  only  other  scheduled  maintenance  action  was  the  installation  of  a 
head  guard  behind  the  starter  motor.  There  were  no  scheduled  maintenance 
actions  performed  by  the  contractor.  The  unscheduled  maintenance  actions 
at  the  crew/organizational  level  and  the  contractor  level  correspond 
with  the  failures  listed  in  Table  2.24,  along  with  some  unscheduled 
calibrations  and  checks.  No  unusual  difficulties  were  experienced  in 
maintaining  the  launcher  subsystem.  Table  2.25  summarizes  the  maintain- 
ability and  availability  indices  for  the  launcher  used  in  FDT&E.  A new 
figure  of  merit  is  included,  mean-1 aunches-between-maintenance  (MLBM). 

2.4.2  Analysis  of  EOT  RAM  Data  on  the  Launcher  Subsystem 

The  EOT  test  team  used  launcher  number  9753  throughout  the 
EOT.  This  launcher  had  also  been  used  by  the  contractor  during  their 
testing.  No  RAM  data  or  operating  time  was  colledted  by  the  contractor. 
Therefore,  for  this  analysis,  operating  time  and  number  of  launches  on 
this  launcher  is  assumed  to  be  zero  at  the  start  of  the  EOT.  However, 
the  EOT  RAM  data  collectors  did  not  record  the  operating  times  of  the 
launcher;  therefore,  only  probability  of  successful  launch  can  be 
calculated. 


Table  2.26  lists  the  failures  of  the  launcher  during  the 
EOT.  The  shock  mount  failure  was  not  experienced  during  the  FDT&E,  but 
was  experienced  three  times  during  the  EDT.  The  shock  mounts  have  a 
limited  lifetime  and  were  replaced  as  a matter  or  routine.  The  one 
failure  listed  was  chargeable  because  the  shock  mounts  had  recently  been 
replaced  but  had  prematurely  deteriorated  to  the  point  where  they  were 
not  usable.  The  shock  mounts  are  usually  good  for  a total  of  about 
three  or  four  launches.  One  spring  pin  failure  was  reported.  (There 
were  three  during  the  FDT&E.)  The  other  two  failures  were  isolated 
incidents. 
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TABLE  2.26  FAILURES  ASSOCIATED  WITH  THE  LAUNCHER  USED  DURING  EOT 


. lELl 

Failure 

Equipment 

Score 

Mission 

Description  of  Failure 

T KH-17 

1 

1 

high  pressure  hose  overstressed  due 

2 KH-28 

1 

0 

to  overpressurizing 
rear  shock  mount 

3 XH-4S 

1 

0 

spring  pin  in  starter  motor 

4 KH-47 

1 

0 

launcher  control  box 

TOTALS 

4 

1 

36  successful  launches,  1 scrub 

due  to  launcher  failure 

Since  there  was  no  operating  twe  recorded  on  the  EDT 
launcher,  no  MTBF  or  reliability  estimates  can  be  made.  Point  estimates 
for  the  probability  of  successful  launch  and  mean-1 aunch-between-fallure 
(MLBF),  can  be  computed.  These  values  as  exhibited  during  the  EDT  are 
as  follows  (see  Section  2.4.1  for  definitions): 

Equipment  Mission 

Probability  of  successful  launch  NA  37" 


MLBF 


■ 36.0 


The  EDT  RAM  data  collectors  recorded  only  the  scheduled 
and  unscheduled  maintenance  actions  performed  at  the  crew/organizatlonal 
level.  No  contractor  data  was  recorded.  Scheduled  maintenance  consisted 
of  pre/post  flight  checks.  Unscheduled  maintenance  consisted  primarily 
of  repalr/replacement  actions  required  due  to  the  failures  discussed 
earlier  In  this  section.  Table  2.27  summarizes  the  maintainability 
Indices  for  the  launcher  used  In  EDT.  MLBM  Is  defined  as  the  number  of 
launches  divided  by  the  number  of  maincenance  actions.  MR  Is  defined 
as  the  number  of  man-hours  of  maintenance  required  per  launch.  These 
two  definitions  differ  from  those  used  previously  where  the  MTBM  and  MR 
were  based  on  operating  or  flight  time.  The  difference  Is  necessitated 
because  of  the  failure  of  the  EDT  RAM  data  collectors  to  record  the 
launcher  operating  hours,  which  also  precludes  the  calculation  of 
availability  Indices  for  the  EDT  launcher. 


2.4.3  Analysis  of  Aggregated  Launcher  RAM  Data 


The  data  presented  In  Sections  2.4.1  and  2.4.2  were  combined 
to  the  extent  possible  to  determine  the  overall  RAM  characteristics  of 
the  launcher  subsystem  during  all  government  testing.  Table  2.28 
suinnarizes  the  aggregated  reliability  data.  The  aggregated  data  are  not 
as  complete  as  desired  due  to  the  failure  of  the  EDT  RAM  data  collectors 
to  record  the  operating  time  on  the  launcher.  The  predominant  equipment 
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failure  recorded  was  the  shearing  of  a spring  pin  on  the  starter  motor 
drive  shaft  (4  Incidents).  This  failure  was  partially  due  to  the  large 
number  of  engine  starts  causing  the  spring  pin  to  wear  out.  The  second 
most  common  problem  (although  only  one  failure  was  charged)  was  the 
rapid  wearout  of  the  shock  mounts.  The  shock  mounts  are  usually  good 
for  three  to  four  launches  and  then  must  be  replaced.  The  one  failure 
was  charged  when  one  mount  failed  prematurely.  Another  problem  area  was 
the  failure  to  maintain  the  proper  launch  pressure  due  to  either  a 
pressure  transducer  failure  or  launcher  control  box  failure.  Direct 
replacement  and/or  calibration  usually  alleviated  the  problem.  On  the 
whole,  the  reliability  estimates  for  the  launcher  presented  In  Table  2.28 
are  better  than  those  for  the  other  subsystems  which  have  been  presented 
so  far. 


TABLE  2.28  LAUNCHER  RELIABILITY  DATA  AND  ANALYSIS  FOR  ALL  GOVERNMENT 
TESTING 


Equipment  Failures 
Mission  Failures 
Operating  Hours 
Launch  Attempts* 

Successful  Launches 
MTBF  (Equipment),  hours 
MTBF  (Mission),  hours 
Reliability  (Equipment) 
Reliability  (Mission) 

Probability  of  Successful  Launch 
MLBF  (Equipment),  launches 
ML6F  (Mission),  launches 


FOT&E 

EDT 

AGGREGATE 

6 

4 

10 

3 

1 

4 

98.6 

Not  Recorded 

SO 

37 

87 

47 

36 

83 

16.43 

32.87 

.91 

.95 

.94 

.97 

.95 

7.8 

9.0 

8.30 

15.6 

36.00 

• 20.75 

^Launch  attempts  scrubbed  due  to  failures  not  related  to  a launcher 
malfunction  are  not  Included. 


Most  scheduled  maintenance  at  the  crew/organi rational  level 
consisted  of  pre/post  launch  preventative  maintenance.  There  were  no 
scheduled  maintenance  actions  performed  by  the  contractor.  Unscheduled 
maintenance  consisted  primarily  of  repalr/replacement  actions  required 
due  to  the  failures.  No  unusual  difficulties  were  experienced  In 
maintaining  the  launcher  subsystems.  Table  2.29  summarizes  the  maintain- 
ability and  availability  Indices  for  the  two  launchers  used  during 
government  testing.  MTBM,  MR  (man-hours  per  operating  hour),  A^  and 

A^  estimates  are  based  only  on  FDT&E  data  because  the  operating  time  was 

not  collected  on  the  EDT  launcher.  The  average  unscheduled  clock  hours 
required  for  maintenance  would  not  meet  the  ED  requirements. 
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2.5  RAM  Characteristics  of  the  Retrieval  Subsystem 


One  retrieval  subsystem  was  used  by  both  test  teams.  There 
were  also  very  few  failures  and  maintenance  actions  on  the  retrieval 
unit.  For  these  reasons,  it  Is  best  to  combine  all  RAH  data  on  this 
subsystem  collected  during  government  testing  and  present  the  combined 
analysis.  Table  2.30  summarizes  the  aggregated  reliability  data.  All 
attempts  at  retrieval  were  successful.  None  of  the  equipment  failures 
resulted  In  damage  to  the  RPV  or  In  mission  delay,  thus  no  mission 
failures  were  charged  and  the  MRBF  for  mission  failures  cannot  be 
estimated.  However,  RPV  damage  due  to  recovery  was  common  but  cannot 
be  considered  a failure  of  the  retrieval  system  to  recover  the  aircraft. 
The  predominant  damages  to  the  RPV  Incurred  during  recovery  were:  torn 
wing  tips,  tom  and  dented  nose  caps,  and  transmitting  antenna  support 
broken.  These  damages  are  considered  minor  and  easily  replaced/repalred. 
One  retrieval  early  In  the  testing  resulted  In  extensive  structure  and 
sensor  damage.  This  was  due  to  a failure  of  the  payload  protector,  not 
the  retrieval  unit.  The  retrieval  system  works  very  well  from  the 
standpoint  of  RAM  and  cannot  be  held  accountable  for  the  fragility  and 
shortcomings  of  the  airframe.  The  retrieval  unit  does  have  some 
deficiencies  In  the  areas  of  human  factors  design  and  the  resultant 
excessive  set>up  time.  This  and  other  problems  are  discussed  In  the 
AMSAA  Independent  Evaluation  Report  on  the  AQUILA  system. 


TABLE  2.30  RETRIEVAL  RELIABILITY  DATA  AND  ANALYSIS  FOR  ALL  GOVERNMENT 


TESTING 

FDTiE 

EOT 

AGGREGATE 

Equipment  Failures 

3 

0 

3 

Mission  Failures 

0 

0 

0 

Retrieval  Attempts 

44 

33 

77 

Retrieval  Successes 

44 

33 

77 

Probability  of  Successful  Retrieval 

1.0 

1.0 

1.0 

MRBF  (Equipment),  retrievals 

14.7 

No  failures  25.7 

Table  2.31  lists  the  three  equipment  failures  during  the  FDT&E. 

It  Is  not  known  what  effect  would  have  resulted  If  the  oil  leak  had  not 
been  discovered  and  repaired.  The  retainer  clip  failures  on  the  hydraulic 
energy  absorbers  occurred  after  a design  modification  was  Implemented 
on  17  August  1977.  The  cause  for  the  retainer  clips  springing  open  has 
not  been  determined.  The  design  change  was  made  because  the  previous 
design  had  been  breaking  In  high  wind  conditions. 
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TABLE  2.31  RETRIEVAL  SUBSYSTEM  EQUIPMENT  FAILURES.  ALL  OCCURRED  DURING 
THE  FDT&E 


EPR  I 

1 KE-12 

2 KE-91 

3 KE-116 


oi  rai ture 

oil  seal  In  energy  absorber  leaking  oil 
Retainer  clip  on  energy  absorber  sprung 
Retainer  clip  on  energy  absorber  sprung 


Host  scheduled  maintenance  at  the  crew/organizatlonal  level 
consisted  of  pre/post  flight  preventative  maintenance.  Vhe  one  exception 
was  a time  change  Item  where  the  vertical  net  support  line  was  changed. 

Site  set-up  time  Is  not  Included.  There  was  no  scheduled  contractor 
maintenance  during  either  the  FDT4E  or  the  EDT.  Unscheduled  maintenance 
was  required  to  repair  the  failures  listed  In  Table  2. Cl.  The  contractor 
also  adjusted  a shock  absorber  and  trlimed  the  vertical  net  rope  once 
during  the  FOT&E.  There  were  no  unscheduled  maintenance  actions  at  either 
level  of  repair  during  the  EDT.  Table  2.32  presents  a summary  of  the 
maintainability  and  availability  Indices  for  the  retrieval  subsystem  as 
exhibited  during  all  government  testing.  The  aval laol 11 ties  were  estimated 
using  the  following  f omul  as: 


. _ MTBM  . _ HT6M 

^1  mmm*  \ 


MTBM  + ?r 


'"“f  ■ rfjTT^Fes  ■ ^2-67  days 

KHR  • .6  hrs  x • .025  days 

MTBM  • 128  ddys  . ^ 

mainten  1.29  days 

FT  - .46  hours  x • .02  days 


The  test  length,  128  days.  Is  total  test  time  starting  at  the  beginning 
of  FDT4E  on  14  July  1977  and  going  through  the  last  day  of  the  EDT  test 
on  18  November  1977.  This  Is  the  most  appropriate  method  for  estimat- 
ing the  retrieval  unit's  availabilities  since  operating  time  Is  not  a 
viable  entity  on  this  subsystem. 

2.6  RAM  Characteristics  of  the  AQUILA  RPV  System 

2.6.1  Reliability. 

The  reliability  of  the  entire  RPV  system  can  be  estimated  by 
considering  the  system  as  a series  of  five  Independent  subsystems  with  no 
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redundancies  as  follows: 


Using  this  model,  the  system  reliability  estimate  is  calculated  by 
multiplying  the  reliabilities  of  the  individual  subsystems.  Even  though 
the  individual  subsystem  reliabilities  were  estimated  using  different 
time  bases,  the  reliabilities  for  the  subsystems  as  expressed  in  the 
previous  sections  may  be  directly  multiplied  due  to  their  independence, 
"able  2.33  summarizes  the  individual  subsystem  reliabilities  and  the 
overall  system  reliabilities.  Figures  given  ir  parentheses  incl'ide  the 
quality  control  failures  whereas  the  other  numbers  do  not. 

TABLE  2.33  AQUILA  RPV  SYSTEM  RELIABILITY  ESTIMATES 


SUBSYSTEM  REI.IABILITY  PARAMETER  EQUIPMENT  RELIABILITY  MISSION  RELIABILITY 


Launcher 

Prob  (Successful 

Launch) 

.95 

.95 

GCS 

R(t  ■ 3.2  hrs) 

.76 

.92 

RPV 

R(t  - 1 .88  hrs) 

.47 

(.39) 

.74 

(.73) 

Sensor 

R(t  » 1.88  hrs) 

.73 

.86 

Retrieval 

Prob  (Successful 

Retrieval ) 

1.0 

1.0 

SYSTEM 

Product  of  Entries 

.25 

(.21) 

.56 

(.55) 

The  two  weakest  links  in  the  system  are  the  RPV  subsystem  and 
the  sensor  subsystem.  These  subsystems  in  the  upcoming  ED  RPV  system  must 
meet  reliability  requirements  which  are  higher  than  those  exhibited 
during  the  Advanced  Development  Program.  Ground  Control  Station 
reliability  must  also  be  improved  in  order  to  meet  the  ED  requirements. 
Some  improvement  in  RAM  will  also  be  necessary  on  the  launcher  and 
retrieval  subsystems  in  order  to  meet  the  ED  RPV  system  requirements. 

As  expected,  the  system's  equipment  and  mission  reliabilities  must  be 
considered  unsatisfactory  from  the  standpoint  of  the  requirements  for 
the  ED  system. 

There  were  two  failures  scored  against  the  auxiliary  support 
system  which  are  not  included  in  the  reliability  figures  in  Table  2.33. 
They  were:  (1)  leaks  in  the  fuel  filler  pumps  used  ty  both  test  teams 
and  (2)  a phantom  failure  of  the  sensor  control  panel  used  during 
boresight  operations  to  respond  properly.  In  the  second  failure  the 
unit  was  bypassed  and  could  not  be  repeated  when  tested  later.  These 
are  presented  for  information. 
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Ttbit  2.34  prtsants  a sutnmary  of  all  the  system  failures 
experienced  during  government  testing.  The  operating  time,  launches  or 
recoveries  of  the  Individual  subsystems  which  Is  used  to  estimate  the 
mean  time  (launches  or  recoveries)  between  failure  is  also  presented. 
Values  Including  the  qualivy  control  failures  are  In  parentheses. 


TABLE  2.34  SOtCIARY  OF  SYSTEM  FAILURES  AND  MTBF's.  SYSTEM  MTBF  IS 

BASED  ON  THE  CCS  OPERATING  TIME.  LAUNCHER  AND  RETRIEVAL 
UNIT  MEAN  UUNCHES/RECDVERIES  BETWEEN  FAILURE  ARE  BASED 
ON  LAUNCHES  AND  RECOVERIES,  RESPECTIVELY. 


Failures  Hours- 


SUBSYSTEM 

rai  ly 

Equipment 

r 

Mission 

Operating 

Time 

ni  or  1 

Equipment 

nuyra* 

Mission 

Launcher 

10 

4 

63  launches 

8.3 

20.7 

GCS 

29 

9.66 

351 .5  hours 

12.1 

36.4 

RPV 

59(73) 

24(25) 

147.8  hours 

2. 5(2.0) 

6. 2(5.9) 

Sensor 

27 

12.6S 

165.1  hours 

6.1 

13.0 

Retrieval  Unit 

3 

0 

77  retrievals 

25.7 

1.1.1  III- 

Other 

2 

0 

— — 

— — 

— — 

TOTALS 

130  (144) 

50.33(51.33) 

351.5  hours 

2.7 

7.0 

(a.4) 

(6.8) 

2.6.2  Reliability  Growth. 

Reliability  growth  projections  using  the  results  of  AQUILA 
testing  as  a starting  point  and  the  Engineering  Development  Program 
requirements  stated  In  the  ROC  as  the  end  point  can  be  made.  The  ROC 
gives  two  types  of  system  reliability  requirements,  both  of  which  are 
based  on  the  mission  failure  definition.  These  are  a system  flight 
reliability  (sensor  excluded  of  .91  and  a system  mission  reliability 
(given  successful  launch  and  recovery)  of  .82,  both  for  a three  hour 
mission.  Using  the  exponential  failure  distribution,  the  flight  MTBr 
requirement  Is  31.8  hours  and  the  mission  MTBF  requirement  Is  15.1  hours. 
Basing  the  MTBF  on  the  GCS  operating  hours  and  using  the  mission  failure 
definitions  In  the  ED  ROC,  the  MTBF  estimates  for  the  AQUILA  program 
were  9.1  hours  flight  MTBF  and  7.4  hours  mission  MTBF  (government  testing 
only). 

To  develop  the  reliability  growth  curves,  the  total  test  hours  to 
be  accumulated  through  the  end  of  DT/OT  II  must  be  assumed.  There  were 
351.5  hours  accumulated  during  the  FDT&E/EDT.  During  the  Engineering 
Development  Program,  approximately  twice  that  amount  of  time  should  be 
accumulated  on  testing  by  the  contractor  and  government;  750  hours  will 
be  assumed.  This  gives  a test  total  over  all  RPV  system  development 
of  about  1100  hours.  This  figure  will  be  used  as  the  point  In  time  at 
which  the  ED  ROC  requirements  must  be  met. 
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The  AQUILA  system  as  tested  by  the  government  was  essentially  a 
fixed  configuration.  There  were  few  test/fix  situations  where  a major 
failure  mode  was  eliminated  by  a change  in  the  hardware.  Two  exceptions 
were  a fix  to  eliminate  the  dome  condensation  which  formed  during  some 
fights  and  an  engineering  change  to  the  spring  retainer  clip  on  the 
retrieval  unit.  Mission  failures  due  to  dome  condensation  were  deleted 
at  the  failure  scoring  conference  with  the  exception  of  the  initial 
failure  and  one  after  the  fix.  Thus,  the  failure  mode  was  not  eliminated 
entirely.  A small  amount  of  growth  was  realized  through  this  change 
especially  in  the  sensor  subsystem.  However,  the  overall  system's 
mission  MTBF  did  not  change  enough  to  significantly  affect  the  shape  of 
the  reliability  growth  curves.  There  were  no  mission  failures  due  to 
the  retainer  clip.  Therefore,  it  can  be  stated  that  there  was 
essentially  no  reliability  growth  during  the  period  of  government  testing 

Since  there  was  essentially  no  growth,  the  average  MTBF  over  the 
entire  test  period  can  be  considered  representative  of  the  system  at 
both  the  beginning  and  the  end  of  test.  The  starting  point  of  the  curve 
should  be  placed  as  close  to  the  beginning  of  the  test  period  as  possible 
Historically,  the  MTBF  of  systems  has  been  examined  at  20  hour  intervals. 
A good  starting  point  for  the  curve  is  chosen  as  the  midpoint  of  the 
first  20  hour  interval.  Thus,  the  reliability  growth  curves  start  at  10 
hours  and  are  projected  out  to  1100  hours. 

Figures  2.1  and  2.2  show  the  reliability  growth  curves  for  the  RPV 
system  flight  reliability  and  for  the  RPV  system  mission  reliability, 
respectively.  The  curves  also  show  the  incremental  MTBF  exhibited  over 
each  20  hour  Interval,  the  average  MTBF  exhibited  over  the  entire  test 
period  and  the  cumulative  MTBF  of  the  system  as  it  approached  the  final 
test  average.  No  incremental  MTBF  is  shown  for  the  260  to  280  hour 
Interval  because  there  were  no  failures  during  this  interval.  The 
equation  for  the  Weibull  reliability  growth  curve  is 


Using  the  two  end  points  of  the  curve  to  give  two  equations  with  two 
unknowns,  the  two  parameters,  \ and  6,  can  be  estimated.  The  most 
important  of  these  is  6.  A rule  of  thumb  for  reliability  growth 
methodology  is  that  a 6 which  is  less  than  .5  indicates  a program  which 
would  have  to  work  very  a'ggressively  to  meet  the  reliability  goal.  When 
6 increases  above  .5,  the  system  reliability  goal  becomes  more  attainable 
(A  6 of  1 indicates  that  no  growth  is  necessary.)  The  B's  shown  for 
the  two  reliability  growf.h  curves  in  Figures  2.1  and  2.2  are  both 
above  .5,  indicating  that  the  goals  set  forth  in  the  ROC  are  not 
unreasonable. 
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TIME  (HOURS) 

V System  Right  Reliability  ( Sensor  Excluded ) 


TEST  TIME  (HOURS) 

2 Reliability  Growth  Curve  for  RPV  System  Missior)  Reliability  (Given  Successful 
Launch  and  Recovery ) 


2.6.3  Maintainability  and  Avallabnity 


The  overall  maintainability  of  the  RPV  system  can  be 
considered  unsatisfactory  for  the  reasons  stated  1n  the  following 
sentences.  Pre-flight  checks  on  all  subsystems  were  lengthy  and  required 
highly  skilled  maintenance  personnel  to  perform  them.  The  manuals 
provided  by  the  contractor  contained  no  scheduled  preventative  mainte- 
nance guides  for  the  organizational  category.  Tools  and  repair  parts 
were  inadequate.  Quality  control  of  in-plant  repairs  and  overhaul  was 
poor.  All  of  these  factors  contributed  to  making  some  portions  of  mainte 
nance  time-consuming  and  cumbersome. 


The  RPV  subsystem  was  the  most  difficult  to  maintain.  The 
number  of  man-hours  spent  performing  both  scheduled  and  unscheduled 
maintenance  per  flight  hour  on  the  RPV  subsystem  constituted  more  than 
half  of  the  maintenance  man-hours  expended  on  the  system  during  government 
testing.  RPV  subsystem  maintainability  must  be  improved  to  meet  the  ED 
system  requirements,  especially  in  the  time  spent  on  pre-flight  checks 
(about  4 hours). 


Table  2.35  presents  a summary  of  the  maintainability  and  avail- 
ability indices  for  the  AQUILA  RPV  system.  The  total  system  MTBM  is 
based  on  a system  operating  time  of  351.5  hours,  which  is  the  same  as  the 
6CS  operating  time.  This  subsystem  was  the  longest  operating  of  all  sub- 
systems, and  the  majority  of  operating  times  of  the  other  subsystems 
is  contained  within  the  GCS  operating  time.  Sy^stem  MR  is  based  on  the 
total  RPV  flight  time  of  123.7  flight  hours.  M^nsch  maintenance 

time-unscheduled)  is  the  same  as  KTTR  (mean-time-to-repair) . The 
ffynsch  levels  of  repair  exceeds  the  ED 

requirement  by  95.2  percent  and  69  percent,  respectively.  The  number 
of  maintenance  man-hours  required  to  obtain  one  hour  of  flight  may  be 
considered  excessive  in  view  of  ED  system  requirements.  Actual  clock 
hours  of  maintenance  per  flight  hour  (7.4  hours)  may  also  be  excessive. 

In  order  to  meet  the  requirements  for  the  ED  program,  many  improvements 
must  be  made,  particularly  in  the  problem  areas  cited  previously  in  this 
section  and  particularly  in  the  area  of  designing  for  maintainability 
into  the  system. 


The  system  availability  estimates  are  also  based  on  ^he 
operating  time  of  the  GCS.  (The  individual  subsystem  availabilities  in 
the  table  are  based  on  their  own  subsystem  operating  time.)  The  system 
availabilities  are  estimated  using  the  following  formulas: 


. _ MTBF 
''i  " MTBF  + MTTR 

__MI^ 

® MTBM  + FT 
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The  AQUILA  system  availability  estimates  are: 

Inherent  Availbility  (A^)  .59 

Achieved  Avail  ibility  (A.)  .28 

a 

The  inherent  availability  requirements  for  the  follow-on  ED  system  as 
determined  from  the  reliability  and  maintainability  requirements  stated 
in  the  ROC  can  only  be  determined  at  the  two  maintenance  levels,  AVUM 
and  AVIM,’  rather  than  a value  for  the  overall  system  as  is  desired. 

An  achieved  availability  requirement  cannot  be  determined  from  the  reli 
ability  and  maintainability  requirements  as  stated  in  the  ROC.  Thus, 
no  comparison  of  where  the  system  is  now  to  where  the  follow-on  ED 
system  must  be  at  IOC  can  be  made.  These  low  availability  estimates 
still  must  be  considered  to  be  less  than  desirable  for  a fieldable  KPV 
system  in  its  intended  operational  environment. 
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ABBREVIATIONS 


- Achieved  Availability 

- Inherent  Availability 

AMSAA 

- Ani\y  Materiel  Systems  Analysis  Activity 

AVIM 

- Aviation  Intermediate  Maintenance 

AVUM 

- Aviation  Unit  Maintenance 

BOC 

- Best  Operational  Capability 

Cl-hrs 

- Clock-hours 

OARCCM 

- Development  and  Readiness  Command 

OTP 

- DetVi-led  Test  Plan 

EO 

- Engineering  Development  (also  FSED,  see  below) 

EOT  (also  - Engineering  Design  Test 

EDT-G) 

EP6 

- Electronics  Proving  Ground 

EPR 

- Equipment  Performance  Report 

Eq 

- Equipment  (as  In  Equipment  Reliability) 

FAALS 

- Field  Artillery  Acoustic  Location  System 

FABD 

- Field  Artillery  Board 

FCEP 

- Flight  Control  Electronics  Package 

FDT4E 

- Force  Development  Test  and  Experimentation 

FEBA 

- Forward  Edge  of  Battle  Area 

FIREFINDER  - Mortar/Artlllery  Locating  Radar  (MALOR)  System 

(AN-TPQ-36  and  AN-TPQ-37) 

fit 

- Flight 

rO 

- Forward  Observer 

FSED 

- Full  Scale  Engineering  Development 

-g 

- Earth  gravity  equivalent 

GCS  \ 

- Ground  Control  Station 

GSR  i 

- Ground  Surveillance  Radar 

Hr 

- Hour(s) 

IOC  1 

- Initial  Operational  Capability 

KPH  ' 

- Kilometers  Per  Hour 

KW 

- Kilowatt 

f ; 

1 i 
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LCD  - Liquid  Crystal  Display 

LED  - Light  Emitting  Diode 

LMSC  - Lockheed  Missile  and  Space  Corporation 

LOA  - Letter  of  Agreement 

fl  - Mean  Maintenance  Time 

Man-hr  - Man-hours (s) 

MAV  - Minimum  Acceptable  Value 

MAXTTR  - Maximum  Time  to  Repair 

Mis  - Mission  (as  in  Mission  Reliability) 

MLBF  - Mean  Launches  Between  Failure 

MLBM  - Mean  Launches  Between  Maintenance 

mm  - millimeters 

MR  - Maintenance  Ratio  r 

i 

MRBF  - Mean  Retrievals  Between  Failure 

MRBM  - Mean  Retrievals  Between  Maintenance 

MTBF  - Mean  Time  Between  Failure  ! 

MTBM  - Mean  Time  Between  Maintenance 

MTTR  - Mean  Time  to  Repair 

MUBF  - Mean  Units  Between  Failure  (e.g.,  Time,  Launches,  Retrievals) 

OV-1  - Designation  for  Mohawk  Aircraft 

RAM  - Reliability,  Availability  and  Maintainability 

REMBASS  - Remotely  Monitored  Battlefield  Sensor  System  j 

Ret  - Retrievals 

ROC  - Required  Operational  Capaoility 

RPAODS  - Remotely  Piloted  Aerial  Observation  and  Designation  System 

RPM  - Rotations  per  Minute 

RPY  - Remotely  Piloted  Vehicle 

RPV-STD  - Remotely  Piloted  Vehicle  - System  Technology  Demonstrator 

R/TA  - Reconnaissance/Target  Acquisition 

SCT  - Suitcase  Tester 

SOTAS  - Stand-off  Target  Acquisition  System 

STD  - System  Technology  Demonstrator 

TARS-75  - Target  Acquisition  Reconnaissance  Study  - 75 

TDP  - Test  Design  Plan 


TRADOC 

TV 

USACDC 

USAEPG 

USAFABO 


- Training  and  Doctrine  Command 

- Television 

- United  States  Am\y  Combat  Development  Command 

- United  States  Amy  Electronics  Proving  Ground 

- United  States  Army  Field  Artillery  Board 
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